securityhigh impacttier 1100% confidence
Concurrent spends could allow overdraft
from loyalty agent · cross-site verified across production deployments
The trigger
Concurrent spends could allow overdraft
The fix
SELECT SUM(amount) FOR UPDATE before inserting the negative spend row
Related patterns
Does your site have this security issue?
Run a free scan — we'll check all security patterns in 30 seconds.
Scan your site free →