Submitted by hickuphh3, also found by 0x1f8b, AuditsAreUS, Foundation, Kthere, Meta0xNull, rayn, and WatchPug
NFTVault.sol#L375
JPEGLock.sol#L54-L62
A users JPEG lock schedule can be overwritten by another users if he (the other user) submits and finalizes a proposal to change the same NFT indexs value.
The existing user will be unable to withdraw his locked JPEGs, resulting in permanent lock up of JPEG in the locker contract.
Insert this test case into NFTVault.ts.
spaghettieth (JPEGd) confirmed
spaghettieth (JPEGd) resolved and commented:
