Submitted by Sherlock
Two different addresses (Alice and Bob) could get credit for locking up the same funds because a user is able to lock without depositing.
Recommend implementing additional checks to force users to have deposited before they are able to lock tokens
xyz-ctrl (Visor) disputed:
ghoul-sol (Judge) commented:
