The transaction being signed, I expect, should also provide a different hash for the data being signed (i.e. the signature hash has different data, though some of it may be the same (e.g. the output script given that it's a deposit to the same address))