You didn't check if they are allowed to anchor without entering the disk and entering the code.

You should also not be allowed to drag around the bomb while it is active.