snicka

Repro steps:
Create account
go to user cp
click on edit profile
change your email address to something wrong
mistype the email address again in the same way
hit Submit Modifications

Result:
effectively destroy your account


I did this today and my damnable ISP has a server side spam filter and so never got the reverification email. When I tried to check to make sure I entered the email address correctly, I was locked out of the edit profile section as well as from posting on the support forum or sending any mods a pm.

Luckily I remembered about the spam filter and disabled it and got the email sent to me from thier spam bin.

Suggested fix:
Do not suspend an account during a change of email address, just don't mark the address changed until after the challenge-response has been answered. Continue using the old email address.