The fix to this issue is because the form key validation is missing on check out. You can view the fix here How to fix Magento checkout after upgrading
How to fix Deprecated Functionality: Function mcrypt_module_open() is deprecated in Magento 2
If you’re like me, you prefer to keep things updated as often as possible. Besides, keeping things updated is a part of preventing security breaches