Finding description

The LamboVEthRouter contract lacks a mechanism to retrieve ETH sent directly to it.

The contract includes a function (receive()) that allows it to accept ETH transfers. However, there is no mechanism to withdraw or retrieve this ETH.

impact - high as funds are locked.

Proof of Concept

Eth sent is locked and can not be recovered.

Recommended mitigation steps

propose a withdraw mechanism to retrieve ETH.