Following internal investigations, NPCI traced the issue to a technical design flaw: the system lacked a limiter on the "Check Transaction Status" API. This led to flooding of requests, especially by ...