VAT bypass found and fixed