limit withdrawals

2 files changed, 3 insertions, 1 deletions

diff --git a/index.js b/index.js
index ab1d1a5e..0564ea9e 100644
--- a/index.js
+++ b/index.js
@@ -64,7 +64,7 @@ app.post("/take", auth, payments.take);
 app.post("/print", auth, payments.print);
 app.post("/send/:lnaddress/:amount", auth, payments.lnaddress);
 app.post("/gateway", payments.gateway);
-app.post("/replace", auth, payments.replace);
+// app.post("/replace", auth, payments.replace);
 
 app.get("/encode", lnurl.encode);
 app.get("/decode", lnurl.decode);
diff --git a/lib/payments.js b/lib/payments.js
index 2f603c98..754d2f0c 100644
--- a/lib/payments.js
+++ b/lib/payments.js
@@ -36,6 +36,8 @@ export let debit = async ({
   type = types.internal,
   rate,
 }) => {
+  if (await g("freeze")) fail("Problem sending payment");
+  if (!user.verified && amount > 1000000) fail(`⚡️${amount} exceeds max withdrawal of ⚡️1,000,000`);
   let ref;
   let { id: uid, currency, username } = user;
   if (!rate) rate = store.rates[currency];