Verify invoice amount in lightning address withdrawal

stackernews · Sep 19, 2023 · c7f78ec · c7f78ec
1 parent 0eb28ef
commit c7f78ec
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/api/resolvers/wallet.js b/api/resolvers/wallet.js
@@ -313,6 +313,10 @@ export default {
         throw new Error('description hash does not match')
       }
 
+      if (decoded.num_msat !== milliamount) {
+        throw new Err('invoice has incorrect amount')
+      }
+
       // take pr and createWithdrawl
       return await createWithdrawal(parent, { invoice: res2.pr, maxFee }, { me, models, lnd })
     },