DittoETH

Summary

As there is a receive function, inside the rETH bridge but no function to withdraw ETH without providing zETH, ether could get stuck inside this contract.

Vulnerability Details

In case of an unintentional transaction, or through bugs in the bridge contract, rETH token contract, or contracts which will be implemented in the future, it could happen that ETH is sent to the bridge contract, which does not leave the contract directly again. There is no way implemented to withdraw this ETH and therefore it would be stuck inside the contract.

Impact

ETH could get stuck inside the rETH bridge contract.

Tools Used

Manual Review

Recommendations

Implement a function that allows (the DAP and / or admin) to withdraw excess ETH from the contract would be good practice.