MyCut

Summary

The function ContestManager::fundContest() does not check whether the Pot has been closed or has enough assets.

Vulnerability Details

When the Owner calls ContestManager::fundContest() on a Pot that has been closed, then the Owner may lose assets because if the Owner tries to retrieve the assets from the Pot, the manager's cut is only 10% and the rest is distributed to the claimants.

The function ContestManager::fundContest() also does not check whether the Pot already has enough assets. It is not possible to retrieve a full amount of the assets.

Impact

The owner loses assets.

Tools Used

Manual review.

Recommendations

Consider adding checks on the Pot status to prevent the aforementioned problems.