Urgent problem – user can add fund for free with stripe

Hello, on my website I’m having a big issue

Some payment with stripe would have the status ‘failed’ or “incomplete” but they would still add fund to terrawallet.

After reviewing a lot of fraudulent payment I found in the log they always have this:
“Order status changed from Pending payment to Completed.”

I guess the payment got completed for a very short time, and it’s enough for terrawallet to add funds. Terrawallet should cancel the fund if the payment got cancelled.

screenshot: https://ibb.co/rwQmcqS
The user in the screenshot got his funds, he’s actually at 1888892,00 € , this is ridiculous. Please when are you going to fix this, I disabled all payment gateway on my website

• This topic was modified 2 years, 6 months ago by lachaussette.
• This topic was modified 2 years, 6 months ago by lachaussette.