---
issue: 121
title: "Frontend: transferFunds and createPayment POST to the same endpoint"
severity: low
domain: Payment
labels: [bug, frontend]
status: open
created: 2026-05-30
source: Full Codebase Audit 2026-05-30
---

# Frontend: transferFunds and createPayment POST to the same endpoint

**Severity:** low
**Domain:** Payment
**Labels:** bug, frontend

## Description

`src/actions/payment.ts:186` — `transferFunds` and `createPayment` both POST to the same backend endpoint. It is unclear whether this is intentional (payload-shape disambiguation on the backend) or an error where `transferFunds` should use a dedicated route.

## Options

1. Give `transferFunds` a dedicated backend route + frontend endpoint constant.
2. Keep shared endpoint but document the backend disambiguation contract.
3. Merge the two functions if they are truly the same operation.

## Recommendation

Confirm backend routing intent; if distinct operations, introduce a dedicated endpoint.

## Affected Files

- `frontend/src/actions/payment.ts:186`

## References

- [Full Codebase Audit 2026-05-30](../09%20-%20Audits/Full%20Codebase%20Audit%20-%202026-05-30.md) — DEC-14