ESX cash handling was completely broken in GetMoney/AddMoney/RemoveMoney. The account-name normalizer converted 'money' → 'cash' unconditionally, before checking which framework was active. ESX's cash account is natively named 'money', not 'cash' — so any call with account = 'money' (the natural name to use) got rewritten to 'cash' and then passed to p.getAccount('cash'), which returns nil on ESX. Fixed: the normalizer now checks _Lib.Framework first and only converts in the direction that's actually correct for that framework ('cash' → 'money' on ESX; 'money' → 'cash' on QB/QBX).
SQL injection risk in GetOfflineMoney/AddOfflineMoney (ESX branch). The account parameter was interpolated directly into a SELECT %s FROM users / UPDATE users SET %s = ? query via string.format, with no validation. Fixed: the column name is now checked against a whitelist (money, bank) before being used in any query; anything else logs an RPS.Error and returns safely instead of running an injectable or malformed query.
Renewed-Banking society-money calls used the wrong export names entirely.GetSocietyMoney/AddSocietyMoney/RemoveSocietyMoney called exports['Renewed-Banking']:GetAccountBalance/AddMoney/RemoveMoney — these are qb-banking's legacy export names, which Renewed-Banking does not re-export under those names. Verified against the official export list at renewed.dev/banking/exports: the real exports are getAccountMoney, addAccountMoney, removeAccountMoney (lowercase-first). Every Renewed-Banking call would have thrown "No such export" before this fix.
okokBanking society-money calls also used the wrong export names. Called GetSocietyAccount/AddMoneySocietyAccount/RemoveMoneySocietyAccount, none of which exist on this resource per its official docs. Corrected to the real exports: GetAccount, AddMoney, RemoveMoney.
qb-banking society-money calls bypassed the resource's exports and queried a management_funds table directly, assuming a specific database schema that may not match the installed version (and silently returning wrong totals if it didn't). Replaced with the documented qb-banking exports (GetAccountBalance, AddMoney, RemoveMoney), which work regardless of the underlying table structure.