No there is no PIN required to complete an order, only to withdraw from your account. This is a known feature and not a bug.