We added server-side validation to improve security — validating all critical data (prices, quantities, transaction parameters) on the server rather than the client side. Only transactions authorised by the server are processed, significantly reducing fraud risk.