GroveLabs Aave v4 ForeignController
ChainSecurity has been a close partner to Grove as we ship products and infrastructure used by some of the largest financial institutions and onchain protocols. We can consistently rely on them to enforce and improve upon the strict security standards that Grove and our partners demand.
About GroveLabs Aave v4 ForeignController
GroveLabs implements an Aave V4 integration for the ForeignController. The new Aave v4 integration adds two relayer functions. One supplies underlying held by the ALMProxy into an Aave V4 market, the other withdraws it back. Both are bounded by rate limits, and deposits further by a slippage tolerance and by a limit on the bad debt the target asset may carry.
Audit Summary
The most critical subjects covered in our audit are functional correctness, security of assets and external integrations. Security regarding all the aforementioned subjects is high.
The general subjects covered are code complexity, unit testing and trustworthiness. The integration is a thin library called from two entry points following the conventions of the surrounding controller, and is exercised by fork tests on both assets of the target spoke. Security regarding all the aforementioned subjects is good.
In summary, we find that the codebase provides a high level of security.
It is important to note that security audits are time-boxed and cannot uncover all vulnerabilities. They complement but don’t replace other vital measures to secure a project.