diff --git a/files/routes/awards.py b/files/routes/awards.py
index 33a1d9909..8631d9716 100644
--- a/files/routes/awards.py
+++ b/files/routes/awards.py
@@ -42,6 +42,7 @@ def shop(v):
 
 
 @app.post("/buy/<award>")
+@limiter.limit("100/minute;200/hour;1000/day")
 @auth_required
 def buy(v, award):
 	if not FEATURES['AWARDS']: