The function depositForMember of BondVault.sol adds user to the array arrayMembers. However it does this for each asset that a user deposits. Suppose a user deposit multiple assets, than the user is added multiple times to the array arrayMembers.
This will mean the memberCount() doesnt show accurate results. Also allMembers() will contain duplicate members
Use a construction like this:
SamusElderg (Spartan) confirmed and disagreed with severity:
ghoul-sol (judge) commented:
