Severity: Low
Confidence: Medium
This detector flags contracts with empty receive()/payable fallback() functions that do not contain an authorization check. This can potentially lead to loss of funds, as anyone can send Ether to the contract without a way of getting it back out.
don't keep receive
empty.
https://github.com/Cyfrin/2023-09-ditto/blob/main/contracts/bridges/BridgeReth.sol#L37
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.