Summary
The most critical subjects covered in our audit are integration with the supported bridges, access control and functional correctness.
The general subjects covered are documentation and integrity.
Security regarding all the aforementioned subjects is high.
In summary, we find that the codebase provides a good level of security.
It is important to note that security audits are time-boxed and cannot uncover all vulnerabilities. They complement but don't replace other vital measures to secure a project.
About Grove xchain-helpers
GroveLabs offers a library (a fork of Spark xchain-helpers) for cross-chain messaging between Ethereum Mainnet and L2s.
This review focused on the first version of Grove xchain-helpers where ArbitrumERC20Forwarder is newly introduced. Other parts of the system are covered by the Spark xchain-helpers Review.