diff --git a/src/modules/fund/fund.controller.js b/src/modules/fund/fund.controller.js
index 646e6a7..dededca 100644
--- a/src/modules/fund/fund.controller.js
+++ b/src/modules/fund/fund.controller.js
@@ -101,7 +101,8 @@ module.exports = {
             msg: '缺少必要参数',
             error: '缺少必要参数'
         });
-        if (!Number.isFinite(+amount) || !Number.isSafeInteger(+amount) || Number.isNaN(+amount)) return res.json({
+        // 非常危险 限制了1000万额度
+        if (!Number.isFinite(+amount) || !Number.isSafeInteger(+amount) || Number.isNaN(+amount) || +amount > 10000000) return res.json({
             code: 5,
             msg: '非法额度',
             error: '非法额度'
@@ -113,9 +114,9 @@ module.exports = {
         });
         const [user, fund] = await Promise.all([User.findById(userId), Fund.findOne({ userId })]);
         if (
-            (coinId === 'vic' && amount < 1000)
+            (coinId === 'vic' && +amount < 1000)
             ||
-            (coinId === 'usdt' && fund.lastWithdraw.usdt || (new Date() - new Date(fund.lastWithdraw.usdt)) / (1000 * 3600 * 24 * 7) >= 1)
+            +amount > (fund && +fund.fundSum || 10000)
         ) {
             return res.json({
                 code: 4,
diff --git a/src/modules/fund/fund.service.js b/src/modules/fund/fund.service.js
index 24724c3..32b6aa1 100644
--- a/src/modules/fund/fund.service.js
+++ b/src/modules/fund/fund.service.js
@@ -34,7 +34,7 @@ const services = [
     },
     {
         url: '/withdraw',
-        method: 'GET',
+        method: 'POST',
         controller: controller.withdraw
     },
     {