Allowing users to define the gas limit for messages sent via the L1 deposit processors for Arbitrum, Optimism and Wormhole may lead to undelivered messages on the other end that must be retried with a higher gas limit.
While all of these bridges implement functionality to retry a message with a higher gas limit if it fails to be delivered, if would be preferable not to allow users to directly specify the gasLimitMessage. Instead, have the deposit processors calculate the required gas based on the number of targets and stakingIncentives being processed. A small buffer can be added to account for any minor differences in gas costs.
Additionally, note that Arbitrum messages must be successfully delivered within 7 days.
It is also worth pointing out that, while Wormhole seems to implement functionality to override the original gas limit in a message, this feature is not well documented and the following excerpt can be found in its documentation:
Hence, it would be highly recommended to strictly prevent sending messages with an insufficient gas limit unless the replay functionality is properly understood and can be relied on.
 In the case of the Gnosis AMB, this has a more severe impact as reported in a separate finding.
