Recover function should be decentralised

[hats-bug-reporter[bot]]

Github username: -- Twitter username: 0xleadwizard Submission hash (on-chain): 0x584acb0846aacbf42876b496bd540e7b25649dd87f73f963516517d54d0d1a1b Severity: medium

Description: Description\ In the implementation of bridge contracts, the recoverNative and recoverERC20 functions act as single points of failure, allowing the owner to withdraw any user funds from the contract.

Given the current threats and incidents of attacks, it would be significantly safer if the owner could only withdraw funds designated as recoverable.

Attack Scenario\ The owner exploits the recoverNative or recoverERC20 function to misappropriate user funds.

Recommendation\ By using storage variables to monitor funds that encounter errors during the bridging process, this bridge can be made more trustworthy and less dependent on operator integrity.

[krzysztofziobro]

Invalid submission - issue assumes mistakes in governance actions or malicious committee