# It's impossible to do a depositETH action on xReceive(...) in ConnextRouter Medium · Three Sigma · Lending aggregator · 6th May, 2023 Finding 3S-FUJI-M07 of the Fuji Finance security review. - Report: /reports/fuji-finance - Source: https://cdn.sanity.io/files/qoqld077/staging/32181a28eac3175d15fb8924d249bb0d91ca350c.pdf --- ### Description The ConnextRouter allows users to bridge items from one chain to another and perform arbitrary actions there. Currently, the ConnextRouter checks, in the depositETH action, that the amount is equal to the msg.value sent. This means that for xReceive(...) calls, which never send native, it's impossible to deposit ETH. ### Recommendation The check that the amount is equal to the msg.value is unnecessary, given that it should be impossible to steal an already existing ETH from the router due to the balance checks. Additionally, this should be implemented for consistency, because for ERC20 tokens this check does not exist currently; users can specify the router as the sender in deposit actions, effectively not checking if the users sent the tokens. Thus, remove ```solidity if (amount != msg.value) { revert BaseRouter__bundleInternal_insufficientETH(); } ``` ### Status Addressed here: [Fujicracy/fuji-v2#650](https://github.com/Fujicracy/fuji-v2/pull/650) --- Related findings: - [ETH withdrawals from EigenLayer always fail due to `OperatorDelegator`'s nonReentrant `receive()`](https://0xsimao.com/findings/renzo-eth-withdrawals-delegator-reentrant): Renzo - [Withdrawing after a slash event before the vault has ended will decrease `fixedSidestETHOnStartCapacity` by less than it should, so following users will withdraw more their initial deposit](https://0xsimao.com/findings/saffron-lido-vaults-slash-eth-withdraw-deposit): Saffron Lido Vaults - [mTapiocaOFT can't be rebalanced because the Balancer in tapiocaz-audit calls swapETH() or swap() of the RouterETH but does not forward ether for the message fee](https://0xsimao.com/findings/tapioca-dao-rebalanced-balancer-eth-fee): Tapioca DAO