Caught a big time bug that would have let users cheat