AIDAv2 security record

The cited address input is missing a check that it is not `address(0)`.

The `bindInviter()` function allows any user to register as a valid member and assign an address as an `inviter`. However, this function lacks restrictions and safeguards: - Anyone can call the function, enabling any address to register as a valid member without checks or prerequisites. - It allows any address to be set as an `inviter`, including invalid addresses such as the zero address, the contract's own address, or the caller's own address, which could undermine the intended purpose of tracking valid invite relationships. - Although the `member.inviter` field is set when this function is called, it is not utilized elsewhere in the contract, making its purpose unclear and potentially redundant.

The `deposit()` function allows any user to deposit `AID` or `USDT` tokens into the contract. However, the function does not update any state variables or store information related to the deposit. This behavior is unusual because functions named `deposit()` typically involve increasing a balance, tracking deposits, or granting some form of credit or acknowledgment to the depositor. The absence of such updates raises questions about the intended purpose of this function, as it seems to lack meaningful functionality and fails to provide expected behaviors associated with deposits.