Race Condition / TOCTOU
High · Logic · CWE-362
Description
Time-of-check vs time-of-use lets parallel requests bypass limits.
Root cause
Non-atomic checks on shared state.
Impact
Double-spend, limit bypass.
Detection
Parallel request testing.
Mitigation
Atomic operations / transactions / locking.
Secure coding
Server-side atomic balance updates.
Safe lab example
PortSwigger race condition labs
Practise related skills in Labs or deepen on Academy library.