Sounds like denial of wallet is a viable attack.

yes and they failed to stop it