Skip to main content
Never fulfill an order on a client-side confirmation alone. Check the payment on your backend with getPaymentStatus(), then match the sender and amount to the order and record the id so it can’t be reused.

Demo

Confirm before fulfilling

confirm-order.ts
testnet must match the value used in the original pay() call, and you must track processed ids to stop replay and impersonation.

See also