fix replay attack and require() after tvm.accept()