I'm not sure how this actually happens. I would assume everything goes from the DB. Did someone just enter an incorrect value? Do they provide some type of API

I'm not sure how this actually happens. I would assume everything goes from the DB. Did someone just enter an incorrect value? Do they provide some type of API to the various vendors and one of them screwed up? In any case, it can't be that hard to have some quality control checks. Why not just flag anything over $1M?