how i found a business logic bug that let a guest attacker use a coupon unlimited times, even after the global usage limit was reached
one vulnerability. multiple targets. multiple certificates.
