receive() in glAVAX should only allow wAVAX

Description

The current implementation of the receive() function in glAVAX allows any smart contract to call it, leading to lost funds.

receive() external payable {
    // prevents direct sending from a user
    require(msg.sender != tx.origin);
}

Recommendation

Refactor the function to only allow transfers from wAVAX.

receive() external payable {
    require(msg.sender == addresses.wavaxAddress());
}

Status

Currently being reviewed by the team.