---
title: "Discussion on \"I Audited My Own Payment Ledger Like It Held Real Money. The Front Door Was Wide Open.\" | Hashnode"
description: "Discussion on \"I Audited My Own Payment Ledger Like It Held Real Money. The Front Door Was Wide Open.\". The accounting math was bulletproof. Then I asked a harder question: what could someone do if they could just reach the API? The answer was, unfortunately, everything."
url: "https://hashnode.com/posts/hardening-a-payment-ledger-for-real-money/6a4ea323aa81e09686e31ef2"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [I Audited My Own Payment Ledger Like It Held Real Money. The Front Door Was Wide Open.](https://notes.sohag.pro/hardening-a-payment-ledger-for-real-money?utm_source=hashnode&utm_medium=feed)

The accounting math was bulletproof. Then I asked a harder question: what could someone do if they could just reach the API? The answer was, unfortunately, everything.

Jul 8 · 10 min read · notes.sohag.pro  
Read the article

-   [#go](https://hashnode.com/tag/go)
-   [#golang](https://hashnode.com/tag/golang)
-   [#security](https://hashnode.com/tag/security)
-   [#fintech](https://hashnode.com/tag/fintech)
-   [#api-security](https://hashnode.com/tag/api-security)

## Written by

[Sohag Hasan](https://hashnode.com/@sohag)

@sohag · Dhaka, Bangladesh

  
[View profile](https://hashnode.com/@sohag)

Tech Lead at MobyPay | Certified Laravel Developer | PHP JS GO | DevOps Enthusiast | Open to projects

WhoAmI => notes.sohag.pro/author

## Responses

Markdown supported · ⌘↵ to post

No responses yet.