i made $100 bypassing woocommerce coupon limits with draft orders

how i found a business logic bug that let a guest attacker use a coupon unlimited times, even after the global usage limit was reached