diff --git a/README.md b/README.md
index 1bbb399..0c6bf23 100644
--- a/README.md
+++ b/README.md
@@ -35,6 +35,7 @@ src/BankHub.sol
 
 1. ALL interaction with DEX is out of scope in this audit.
 2. Currently there are no user withdrawal function in `IDRCoin` contract. So user can only bought IDRCoin with USDT, but cannot sell it back to USDT.
+3. USDT blacklisting this contract is out of scope.
 
 ## Known Issue