Only logged-in Omegas can generate valid votes and each account can only generate one vote.
Our suspicion right now is that someone found a way to edit the contents of their one vote, thus invalidating it.
My suspicion is that someone intercepted the POST request, modified it and sent to your backend. If you do not validate the input then you have a problem CWE-20: Improper Input Validation. I play like that everyday
To bad the voting is disabled now and I can’t check it.
Props for the mysterious voter ![]()