Noel Neo Banking is RezaNoel’s command-based ESX resource. The reviewed version 1.0.0 uses mysql-async and the legacy esx:getSharedObject event. It does not contain the QBCore/Qbox adapters, interest settings, ATM system or rate-limit configuration previously described here.
What the package contains
The /bank command opens account creation, deposits, withdrawals, transfers and deletion; /balance reads balances. The server creates user_bank_accounts and limits normal account creation to three per player. Config.ESX is the supplied framework setting. The manifest loads client Lua; it does not declare a browser-based NUI.
Why this version needs repair
In the reviewed server/main.lua, withdrawal queries select and update an account by its supplied ID without checking that it belongs to the requesting player. Balance reads and writes are also separate operations. These source-level defects contradict a claim that this version is protected against account abuse. Do not use it unchanged for a live server economy.
A useful evaluation boundary
A developer should enforce account ownership, positive bounded amounts and atomic money changes on the server before deployment. Test with separate accounts and concurrent requests on an isolated database. The original release targets older ESX; modern ESX, QBCore and Qbox require a verified adaptation. This is a code review finding, not a gameplay test or a complete security audit.