Manat sits between a shop and its payment provider, so a bug in signature checks, amount handling or callback verification can cost real money. Please report one privately: email info@keytd.com or open a private security advisory rather than a public issue.
Include the language, the provider and, if you can, a test vector (spec/vectors) that shows the problem.