DashCash is a peer-to-peer money app built with Express and Node.js where users send funds to friends by entering a recipient handle and an amount. The transfer endpoint recalculates everything server-side and updates both balances in a single handler. Review the /transfer route and decide whether the amount is handled safely.

LaunchLane is a Spring Boot platform for deploying production projects and managing teammates through Spring for GraphQL. A legacy link-sharing transport lets developers open GraphQL documents from the internal explorer. Review the GET and POST GraphQL paths and how they handle browser-authenticated state changes. A successful exploit lets an attacker add their email as an organization owner, exposing deployments, environment secrets, and customer infrastructure.

StreamPay is a payroll dApp that lets companies fund a vault and run batch salary payouts to their employees in a single transaction. Each pay cycle, an admin calls the batch payout function which iterates over all registered employees, sends them their accrued ETH, and updates the internal ledger. Review the payout logic and determine whether funds are always accounted for correctly.