In every system I've worked on recent successful TOTPs have been cached as well to validate they're not used more than once.