New API integer overflow: one request turned a $0.10 balance into $16.9T

1 comments

• $deadcatfound 11 hours ago

  A balance needs domain bounds, not just an integer type. Reject impossible state at the write boundary before it reaches billing or risk systems.