Curve: Business Logic Flaw - A non premium user can change/update retailers to get cashback on all the retailers associated with Curve

Hi, While testing your android application I've found a business logic flaw by using which a non premium user can update/change the retailers when ever and what ever retailers he wants to. Curve application has a functionality called "Earn curve cash". A non premium user can select only 3 retaile...