Old flaw in ProtX payment code