Can you spot the vulnerability?
In the VotingEscrow contract, the depositManaged function allows a user to deposit a normal NFT (identified by _tokenId) into a managed NFT (identified by _mTokenId). The function transfers the voting power associated with the normal NFT to the managed NFT, updates the voting balance, and deposits rewards into the relevant reward contracts.
Think you've got the answer? We'll post the solution on Friday.