diff --git a/webapp/controller/ShopController.class.php b/webapp/controller/ShopController.class.php
index 55396dde..a694a459 100644
--- a/webapp/controller/ShopController.class.php
+++ b/webapp/controller/ShopController.class.php
@@ -365,6 +365,7 @@ class ShopController extends BaseAuthedController
         $id = $order['id'];
         $goods_num = $order['goods_num'];
         $o_status = $order['status'];
+        $address = $order['address'];
 
         if ($o_status != 0) {
             $this->_rspErr(1, "order status error, status: {$o_status}");
@@ -375,6 +376,8 @@ class ShopController extends BaseAuthedController
         switch ($status) {
             case "9":
                 $buyStatus = 1;
+                // 充值成功，开始首充奖励
+                $this->beginFirstTupop($address);
                 break;
             case "99":
             case "98":
@@ -398,7 +401,7 @@ class ShopController extends BaseAuthedController
         $meta = mt\Item::get($item_id);
         error_log("buyGoodsDirect---" . $item_id . "---" . $item_num . "---" . $bundle_size . "---" . $meta['name']);
         if ($meta && $item_num > 0) {
-            $address = $order['address'];
+            // $address = $order['address'];
             $account_id = $this->getAccountId($address);
 
             if ($item_id == V_ITEM_DIAMOND) {
@@ -407,7 +410,6 @@ class ShopController extends BaseAuthedController
                     'val' => $item_num
                 ];
                 LogService::productDiamond(['account_id' => $account_id], $event);
-                $this->beginFirstTupop($address);
             }
 
             error_log("buyGoodsDirect---" . $address . "---" . $item_id . "---" . $item_num);
@@ -1133,6 +1135,15 @@ class ShopController extends BaseAuthedController
     public function buyDiamond()
     {
         $num = getReqVal('num', 0);
+        if (!is_numeric($num)) {
+            $this->_rspErr(1, "num is invalid, {$num}");
+            return;
+        }
+        if ($num <= 0) {
+            $this->_rspErr(1, "num is invalid, {$num}");
+            return;
+        }
+
         $price = $this->normalizeWeb3Price($num);
         $item_id = V_ITEM_DIAMOND;
         $item_count = $num;