Security & Limits

Security

security:
  prevent-creative-bounties: true   # block bounties on creative/spectator players
  prevent-self-bounties: true       # block placing a bounty on yourself
  inventory-space-check: true       # check inventory space before claiming
  item-validation: true             # reject items with illegal enchantments

Rate limits

rate-limits:
  bounty-creation: 5   # max bounty creations per player per hour
  claim-attempts: 10   # max claim attempts per player per hour

The per-creation cooldown (bounty.cooldown-minutes) is separate from the hourly limit. Players with elitebounty.bypass.ratelimit skip both. The cooldown message shows the remaining wait via the {time} placeholder.

Performance

performance:
  cache-size: 1000               # max cached bounties
  cleanup-interval-minutes: 60   # how often expired bounties are cleaned
  database-pool-size: 10         # DB connection pool size

Money safety

Creation withdraws cost + tax up front and refunds on database failure; cancel/expire refund the issuer. Failed economy operations are logged at CRITICAL/severe for manual reconciliation rather than silently dropping funds.