TOCTOU in Payment Systems: When Validation Becomes Stale Before Commit

The formal problem: CWE-367 Time-of-check to time-of-use (TOCTOU) is a formally catalogued class...