Public bitaccess bug reports.

Team Bounty Title
bitaccess - Missing Rate limiting for sensitive actions (like "forgot password") and reCaptcha error.
bitaccess $200 EXTREMELY URGENT: Missing control of bitcoin amount when selling bitcoin allows a user to withdraw any amount of money, unrestricted.
bitaccess - Missing SPF for hackerone.com
bitaccess $50 BYASSING OTP Verification