Features & Security
Transactions
| Action | Effect |
|---|---|
| Deposit | Cash → bank |
| Withdraw | Bank → cash |
| Transfer | Bank → another online player's bank (optional fee) |
All amounts are validated against the configured min/max limits, and the player's balance is checked server-side before any money moves.
Dirty Money
A separate dirty-money balance is shown in the UI. It maps automatically:
- ESX →
black_money - QBCore / QBox →
crypto - Override the source via
Config.DirtyMoneyAccount
Transaction History
The UI shows the most recent transactions (deposits, withdrawals, transfers sent/received), each with a timestamp. History is kept in memory and cleared shortly after a player disconnects.
Anti-Exploit
ORB Banking is built server-authoritative:
- Proximity validation — Transactions are rejected if the player isn't near a bank
- Rate limiting — A configurable cooldown blocks transaction spam
- Amount validation — Negative and out-of-range amounts are rejected
- Transfer rollback — If a recipient disconnects mid-transfer, the money is returned
- Auto-ban — After repeated tampering attempts a player is banned, and a critical alert is sent to Discord
Discord Logging
When banking_webhook is set, deposits, withdrawals, transfers, and security alerts are posted to your channel with the player's name and identifiers.