`ContestManager::fundContest(uint256)` ignores return value by `token.transferFrom(msg.sender,address(pot),totalRewards)` allowing an attacker to exploit the contest.