# Cap::receive() does not place restrictions in the sender, which may lead to donations Low/Info · Three Sigma · Cross-chain liquidity layer 1 · 25th June, 2024 Finding 3S-Mitosis-L05 of the Mitosis security review. - Protocol: https://mitosis.org/ - Report: /reports/mitosis - Source: https://cdn.sanity.io/files/qoqld077/production/b6b3bd7bb47407d99e76abb7c6dc615c1db5018e.pdf --- ### Description Cap::receive() has no restrictions in place of the msg.sender, which means anyone can send funds to Cap, without any effect. ### Recommendation Delete the function or specify who may call it. ### Status Addressed in [#b9ed378](https://github.com/mitosis-org/evm/pull/194/commits/b9ed37829bdf1fdbd6467585db29caa8d04e7874).