Grove ALM Controller

ChainSecurityFiles named in the report

Audit

ChainSecurity reviewed Grove (Grove ALM Controller) on 15 Aug 2025: 13 findings, 0 critical; all marked fixed.

No open critical findings
Open the reportOpen Grove’s security record

Report hosted on chainsecurity.com.

Trustblock does not review code.

Findings13

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High001
Medium002
Low0010
HighIneffective maxSlippage Check in UniswapV3LibFixed

The report gives no description here.

MediumGovernance Tick Bounds Not Revalidated When Adding Liquidity to Existing PositionFixed

The report gives no description here.

MediumPool/TokenId Mismatch Allows Incorrect Rate Limit Accounting in addLiquidity()Fixed

The report gives no description here.

LowDisabled Slippage Protection for Pendle RedemptionsFixed

The report gives no description here.

LowIncorrect Comment Above UniswapV3Lib.swap()Fixed

The report gives no description here.

LowMaple Redemption Can Be DoSedFixed

The report gives no description here.

LowMisleading Relayer Tick Parameter Validation When Adding to Existing PositionFixed

The report gives no description here.

LowMissing maxSlippage Validation in SettersFixed

The report gives no description here.

LowMissing UniswapV3 Tick Spacing CheckFixed

The report gives no description here.

LowOver-reduced Limit in Maple RedemptionFixed

The report gives no description here.

Show 3 more
LowRelayer Can Bypass Min Amount Validation When Adding to Existing PositionFixed

The report gives no description here.

LowUniswapV3Lib: Swap May Not Consume All Input TokensFixed

The report gives no description here.

LowUnused IERC20Metadata ImportFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (26)

  • src/interfaces/libraries/CentrifugeLib.sol
  • src/interfaces/IALMProxy.sol
  • src/interfaces/libraries/PendleLib.sol
  • src/interfaces/UniswapV3Interfaces.sol
  • src/interfaces/libraries/PSMLib.sol
  • src/interfaces/libraries/common/ERC20Lib.sol
  • src/interfaces/CentrifugeInterfaces.sol
  • src/interfaces/ILayerZero.sol
  • src/interfaces/libraries/MerklLib.sol
  • src/ForeignController.sol
  • src/interfaces/libraries/CCTPLib.sol
  • src/interfaces/CCTPInterfaces.sol
  • src/RateLimits.sol
  • src/interfaces/MerklInterfaces.sol
  • src/ALMProxy.sol
  • src/interfaces/PendleInterfaces.sol
  • src/MainnetController.sol
  • src/interfaces/libraries/UniswapV3Lib.sol
  • deploy/MainnetControllerInit.sol
  • src/interfaces/libraries/CurveLib.sol
  • deploy/ControllerInstance.sol
  • src/interfaces/libraries/common/MathLib.sol
  • deploy/ForeignControllerInit.sol
  • src/RateLimitHelpers.sol
  • deploy/ControllerDeploy.sol
  • src/interfaces/IRateLimits.sol

Part of Grove’s security record

Grove
Audits10 audits by 2 firmsLast audit Sep 2026, by ChainSecurity.
Critical findingsNo open critical findingsAcross 10 reports.
Open Grove’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Nov 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us