I am happy not to be coding for financial apps as it is so hard to foresee every vulnerability. You are a brave man to offer this service and fortunate that you could detect this issue fairly quickly. I hope you are able to continue.