diff --git a/webapp/controller/BlockChainController.class.php b/webapp/controller/BlockChainController.class.php
index 57dc8f18..b335d115 100644
--- a/webapp/controller/BlockChainController.class.php
+++ b/webapp/controller/BlockChainController.class.php
@@ -408,6 +408,12 @@ class BlockChainController extends BaseAuthedController {
         $chipIds = explode('|', getReqVal('chip_ids', ''));
         $slotIds = explode('|', getReqVal('slot_ids', ''));
 
+        if (count($chipIds) != count($slotIds) ||
+            count($chipIds) < 0) {
+            myself()->_rspErr(101, 'chip_ids paramater error');
+            return;
+        }
+
         switch ($type) {
         case 1:
         {