EXTREMELY URGENT: Missing control of bitcoin amount when selling bitcoin allows a user to withdraw any amount of money, unrestricted.

Summary

On cash.bitaccess.co, there was one edge case where user input were not being validated correctly. Thanks to @cablej for reporting the bug in ethical manner and his helpful comments during the fix period.

On cash.bitaccess.co, the endpoint for selling bitcoin did not verify the posted amounts of bitcoin and USD. This resulted in users being allowed to sell extremely small amounts of bitcoin for any amount of USD, potentially compromising any bitcoin ATM. Response was speedy on bitaccess's side and this issue is now fixed.