The server needs to check that the maximum cash & bank does not exceed the amount set by the client. A simple JS edit or just removal of the client side validation can bypass the checks and the server will accept it without checking first.
