Summary

There is an unnecessary receive function in the BridgeReth contract, which can result in users accidently sending funds directly to the contract. Since there is no functionality to later remove these funds, this will effectively result in lost funds. This can be a result of users not understanding how the BridgeReth contract works, as it is intended to take and convert ETH.

Vulnerability Details

The receive function defined in the BridgeReth contract has no funcitonality:

This means that if users accidentally send ETH directly to the contract, it will effectively be lost.

Impact

Users can potentially lose funds through making a mistake.

Tools Used

Manual review

Recommendations

Remove the receive function as it has no purpose.