ChainSecurity is a trusted and reliable partner from the early Maker days. Security is Spark's #1 concern, and Chainsecurity has proven themselves many times over.
Spark implements the Spark ALM Controller, a set of on-chain components of the Spark Liquidity Layer designed to manage and control the flow of liquidity on Ethereum mainnet and L2s, and between them. This version migrates the mainnet USDC bridging path from Circle’s CCTP V1 to CCTP V2.
We have conducted a thorough review of the scope. The most important area covered in our review is the correctness of the CCTP V2 integration, as CCTP V2 introduces new parameters such as a fee cap and a finality threshold.
We provide this audit report to assist in forming an opinion on the risk profile of the Spark ALM Controller v1.11. All issues we reported are of informational severity and have been corrected in Version 2. In summary, we find that the codebase provides a good level of security, if operated under the assumptions documented in System Overview, Trust Model and System Considerations.
It is important to note that security audits are time-boxed and cannot uncover all vulnerabilities. They complement but don’t replace other vital measures to secure a project.