Wait... What the???

Quote "BitGrail lost $170 million worth of Nano XRB tokens because... the checks for whether you had a sufficient balance to withdraw were only implemented as client-side JavaScript "

I remember a number of early e-commerce sites that put item prices in HTML forms. So craft your own POST, and name your own price.

Yes, seen this once before, where the shipping price was calculated client side, then sent to the server with no validation. You could craft a request with a negative value and get the price down to a cent for the entire cart!

At least in e-commerce, you can always send an email to the customer explaining the mistake, and cancel the order...

Recently seen the price listed/editable in the URL on a checkout form page.

"top men"

Kudos. It's harder to lose $100m these days as when Bitcoin was at peak price.

hilarious!