The Pot contract isn't funded at creation
Summary
The Pot contract isn't funded at the time of creation which could lead to users not being able to withdraw their rewards.
Vulnerability Details
The function for funding the Pot contract is separated with the one that is for creating it. The owner of the ContestManager.solshould first call the createContest function and after that the fund contest one. That could lead to situations where the Pot is initialized (created), but still not funded and users are already trying to get their rewards without success.
Impact
Users could be misleaded.
Tools Used
Manual Review
Recommendations
Call the fundContestfunction inside the createContest::ContestManager
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.