Summary

Contract KittyBridge doesn't have a function to withdraw LinkToken, funds could be locked in the contract if Admin decides to update Contract KittyBridge and deploy a new Contract KittyBridge.

Vulnerability Details

Contract KittyBridge doesn't have a function to withdraw LinkToken, funds could be locked in the contract if Admin decides to update Contract KittyBridge and deploy a new Contract KittyBridge.

Impact

Link Token locked in the Smart Contract.

Tools Used

Manual

Recommendations

Add a withdraw function to KittyBridge, so it could be possible to withdraw native token and Link token.