MyCut

Summary

Players have a 90 days window to claim reward which begins to count immediately after the contest is created. which is not fair to players because the contest is not funded in the same transaction as the creation.

Vulnerability Details

If the owner creates a contest and not fund it, the players will not be able to claim their rewards because it has not been funded, therefore the players are losing time until the contest is funded before they can claim, therefore the claim period starting immediately the contest is created whether funded or not is not fair to players.

the owner could decide to fund few seconds to when the 90 days is almost over, this way players might not be able to withdraw in time and the owner closes the pot and they get a big share of the reward when they close the p0t

Impact

Players could lose their rewards

Tools Used

Manual Review

Recommendations

the 90days countdown should start when the pot has been funded