Do a through audit of every single token you're sending and receiving. Some harnesses include things you didn't expect.