Morpho

Identification (as of October 3, 2026). Name: Morpho Blue. Website: https://app.morpho.org; documentation: https://docs.morpho.org. Category: DeFi lending / isolated variable-rate money markets.

Morpho publicly released the Blue whitepaper and code on October 11, 2023; a separate production “launch date” is Not verifiable as of October 3, 2026. Chains supplied by the request are represented in Morpho’s current address registry: Arbitrum, Base, Ethereum, Hyperliquid L1/HyperEVM, Katana, Monad, OP Mainnet, Polygon, Robinhood Chain, Stable, Tempo and Unichain. Core Morpho singleton addresses (chain order matching the list where identifiable): Arbitrum 0x6c247b1F6182318877311737BaC0844bAa518F5e; Base 0xBBBBBbbBBb9cC5e90e3b3Af64bdAF62C37EEFFCb; Ethereum same vanity address; Hyperliquid L1/HyperEVM 0x68e37dE8d93d3496ae143F2E900490f6280C57cD; Katana 0xD50F2DffFd62f94Ee4AEd9ca05C61d0753268aBc; Monad 0xD5D960E8C380B724a48AC59E2DfF1b2CB4a1eAee; OP 0xce95AfbB8EA029495c66020883F87aaE8864AF92; Polygon 0x1bF0c2541F820E775182832f06c0B7Fc27A25f67; Robinhood 0x9D53d5E3bd5E8d4Cbfa6DB1ca238AEA02E651010; Stable 0xa40103088A899514E3fe474cD3cc5bf811b1102e; Tempo 0x10EE9AAC980A180dd4DcFc96C746d60B0EA88f97; Unichain 0x8f5ae9CddB9f68de460C77730b018Ae7E04a140A.

Official registry links each to an explorer and the morpho-blue source repository. Native token: MORPHO, governance token; it is distinct from the Blue singleton. Verification limitation: requested “≥2-source cross-check including Dune” is not satisfied: Dune MCP is unavailable in this run. Explorer/source verification is documented, but Dune confirmation is Not verifiable as of October 3, 2026. Fork lineage. Morpho Blue is not a fork of Aave or Compound; it is a new Morpho codebase intended as a minimalist, immutable, permissionless-market primitive.

Its predecessor was Morpho’s optimizer layer over Aave/Compound, but Blue changes the architecture to isolated markets, oracle-agnostic pricing, callbacks and a singleton core. The repository contains public audits and formal-verification materials; exact audit coverage for every current deployment is Not verifiable as of October 3, 2026. Malicious modifications in comparable Morpho Blue forks: Not verifiable as of October 3, 2026.

Morpho Blue appears to be a real product portal, not a template landing page: the docs explicitly describe app.morpho.org as an interface for lenders and borrowers, with listed capabilities to view markets/vaults, deposit, manage, exit vault positions, and enter/manage/exit borrow positions. The documentation also exposes a developer API with both REST and GraphQL access, including public endpoints for market lists, user positions, vault data, and a GraphQL playground, which is a strong sign of open developer tooling rather than a marketing-only site. The product surface looks mature enough to support live protocol interactions: the docs provide concrete deposit/withdraw flow pages, SDK guidance for ready-to-send transactions, and contract documentation for Blue markets, all of which point to an operational app and integration stack.

The site also frames the API as a default data layer for apps and research, reinforcing that an open API exists for developers. I did not verify actual deposit/withdraw success rates or live transaction completion from the web evidence available here. I also did not find strong signs of a fake-metrics or placeholder-only site in the surfaced materials; however, broken-link checks and full UX QA are not verifiable as of 2026-10-03.

Open API: yes — public REST and GraphQL are documented, with a separate private enterprise API path mentioned as well.

Morpho Blue has an active bug bounty program on Cantina. The program page shows it is Live, started on 27 Mar 2024, with a maximum reward of $2,500,000 and severity-based payouts of Critical $2,500,000, High $50,000, Medium $10,000, and Low $3,000. The page also lists a $30 deposit requirement and 1,697 findings submitted.

A Morpho security page and docs corroborate that the ongoing bounty is on Cantina and covers Morpho Blue, with maximum bounty coverage up to $2.5M. The available sources do not provide a summarized breakdown of bounty outcomes/results beyond total findings submitted; any more detailed results are not verifiable as of 2026-10-03.

Assessment — Dependencies & Counterparty Risk (as of October 5, 2026) Overall: Morpho Blue is a non-custodial, immutable lending primitive; it does not itself custody assets, operate a CEX/MM, issue stablecoins, or rely on one protocol-wide collateral pool. Each market permanently specifies one loan asset, collateral asset, oracle, LLTV, and interest-rate model; markets are isolated. Oracles/manipulation — high structural risk. Oracle choice is permissionless, market-specific, and immutable. Feeds may depend on Chainlink, Redstone, Chronicle, API3, Pyth, DEX liquidity, exchange prices, or issuer-controlled NAV.

Stale, manipulated, unavailable, or overly optimistic pricing can prevent liquidations, trigger wrongful liquidations, or create bad debt. NAV-based and thin-liquidity feeds are particularly exposed. External protocols/assets: Risk is transferred to the selected collateral and loan assets. Stablecoins add issuer, reserve, blacklist/freeze, banking, and depeg risk; LST/restaking assets add validator, withdrawal-queue, slashing, exchange-rate, and oracle risk; RWA/tokenized assets add issuer, custodian, legal-enforceability, and SPV/NAV risk.

A failure generally remains contained to affected markets, but shared loan assets, correlated collateral, liquidity shortages, and Morpho Vault allocations can transmit losses economically. Bridges and chain risk: Deployments are separate by network, so a bridge-wrapped asset can import bridge, canonical-issuer, or chain-finality risk. The provided chain list also names “Hyperliquid L1,” while Morpho’s current API documentation identifies “HyperEVM”; exact deployment mapping requires on-chain verification. Not verifiable as of October 5, 2026. Custodian/CEX/MM exposure: No direct protocol custody was identified. Indirect exposure exists where collateral is exchange-custodied or issuer-backed, e.g., Coinbase-linked cbBTC markets or centralized stablecoins.

Insolvency, redemption suspension, sanctions/blacklisting, or market-maker withdrawal can cause depeg, liquidation failure, and impaired recovery. > Contradiction / data gap: No protocol-wide exposure percentage can be reconciled from web sources. Dune MCP was unavailable; per-chain TVL, asset, oracle, bridge, stablecoin, LST/restaking, RWA, and issuer concentrations are Not verifiable as of October 5, 2026. On-chain figures would supersede aggregator or protocol-reported totals. Failure scenarios: oracle manipulation; stablecoin/LST depeg; issuer or custodian insolvency; bridge exploit; chain halt/reorg; thin liquidation liquidity; correlated collateral crash; or vault-curator concentration.

Audits and bug bounty reduce, but do not remove, smart-contract risk.

Morpho Blue is organized as a noncustodial smart-contract system: users retain control of assets through their own wallets and private keys, and Morpho states it does not hold, custody, manage, or control users’ digital assets. Vaults are also described as noncustodial; curators can configure strategy and risk parameters but cannot take custody of user funds, and users can withdraw at any time subject to available liquidity. No evidence in the retrieved materials indicates a protocol-level withdrawal pause; Morpho explicitly says its smart contracts cannot be paused, so withdrawal_paused is false.

The retrieved materials do not describe user assets as segregated in a way that supports a positive segregation finding, so segregated_assets is false.

Assessment — key management organization Morpho Blue uses a layered, role-separated model, not a single protocol custodian: 1. Morpho Blue core: The base lending contract is immutable and governance-minimized. Morpho governance cannot generally halt markets or control user funds; risk configuration is externalized to market creators, vaults, curators, and integrators. Governance retains limited powers such as the fee switch, supported LLTV/IRM whitelisting, treasury control, and protocol-contract administration.

2. Vault risk-management layer: For legacy MetaMorpho/Vault V1, authority is divided between:

• Owner: highest privilege; appoints the curator and allocators, controls fees and timelocks, and inherits curator, allocator, and guardian powers.
• Curator: selects/enables markets and sets supply caps; increases to caps are timelocked.
• Allocator: reallocates liquidity and manages supply/withdraw queues within curator-defined limits; multiple allocator addresses may exist.
• Guardian: can revoke selected pending risk changes during their timelocks, providing a defensive/emergency control. The documented security model intends the owner, curator, and guardian to be different addresses. Timelocks give depositors and the guardian time to react before material risk increases take effect. 3. Current Vault V2 direction: Role separation is stricter: the owner no longer inherits the other roles; the curator manages strategy, allocators execute bounded liquidity operations, and sentinels can reduce risk or cancel pending changes. Morpho recommends multisig/MPC controls for owner and curator keys, while a monitored hot key may be acceptable for allocators because their powers are bounded. Risk conclusion: The principal key-management risk is concentrated in each vault’s owner and curator, not in the immutable Morpho Blue core. Allocator compromise is generally a bounded allocation/liquidity risk; owner compromise can result in complete vault-control loss. Exact owner, curator, guardian, allocator, multisig threshold, and deployed-role assignments for the listed chains: Not verifiable as of October 3, 2026 (on-chain verification unavailable in this run).

Assessment — as of October 5, 2026. Dune was unavailable; therefore deployment-state checks are Not verifiable as of October 5, 2026: current owner values per chain, proxy-admin type, decoded admin events, role renunciation, timelock delay, and latest implementation slots. Addresses / verification. The previously recorded core Morpho addresses across Ethereum, Arbitrum, Base, Hyperliquid L1, Katana, Monad, OP Mainnet and Polygon remain the working address set; the official address registry also lists Morpho deployments and source repositories. Exact current addresses for the additional listed chains are Not verifiable as of October 5, 2026. Architecture. Morpho Blue’s canonical source is a direct Morpho contract, not an upgrade proxy: no proxy/delegatecall or upgrade entrypoint is present in the reviewed source. Markets have five immutable parameters—loan token, collateral token, LLTV, oracle and IRM—and cannot be modified after creation. ``text Governance / owner (state owner: unverified) │ setOwner, enableIrm, enableLltv, │ setFee, setFeeRecipient ▼ Morpho Blue singleton (direct deployment) │ isolated markets: immutable oracle + IRM + LLTV │ users: supply / withdraw / borrow / repay / liquidate `` Admin powers and failure modes. The owner can change ownership, whitelist IRMs/LLTVs for future markets, and set market fees subject to the contract maximum; it cannot arbitrarily transfer user funds, alter existing market parameters, pause the system, upgrade code, or invoke emergency withdrawal.

Oracle manipulation remains a market-specific risk because each market selects its own oracle. Users can exit without admin intervention, subject to available liquidity and position solvency. A compromised owner could introduce dangerous future markets/IRMs or increase fees, but cannot directly rug existing balances.

Governance documentation describes a 5/9 multisig implementing approved governance actions; whether that multisig is the on-chain core owner is Not verifiable as of October 5, 2026. No core timelock is evidenced in the reviewed source; measured on-chain delay is Not verifiable as of October 5, 2026. Contradiction callout: “Immutable core” is supported by source/docs, but live proxy, owner, and timelock status cannot be confirmed without on-chain/Dune verification. Risk: low direct rug/freeze risk; moderate governance/configuration and oracle/IRM risk. Audits/formal verification are documented, but unresolved severity counts are Not verifiable as of October 5, 2026.

Security review / competition for Morpho Blue

Interest Rate Module Audit for Morpho Blue

Cantina public competition; report publication date: 2024-01-05. Scope: morpho-org/morpho-blue; competition period 2023-11-13 to 2023-12-04. Covers deployed code: Not verifiable as of 2026-09-04; no bytecode-match analysis was performed for deployed Morpho Blue instances.

• Scope: Morpho Blue core contracts via an open security competition hosted by Cantina (Jan 2024). • Date: Competition from Nov 16–Dec 7 (report dated 2025-06; Infrared labels this the Jan 2024 Cantina competition for Morpho Blue). • Link: Morpho audits page references “Morpho Blue – Cantina competition”; PDF report is mirrored by third-party hosting showing detailed findings distribution. • Severity findings (from competition report): 0 Critical, 1 High, 8 Medium, 151 Low, 36 gas optimizations, 163 informational. • Fix status: The competition report lists issues but does not give a definitive resolved/acknowledged matrix for each severity; fix status is Not verifiable as of 2026-08-27. • Bytecode / deployed-code match: Competition evaluated source code repositories at the time; explicit bytecode-matching to mainnet deployments is not documented in public excerpts – Not verifiable as of 2026-08-27. • Covers deployed code: Strong indication this targeted the main Morpho Blue implementation intended for deployment; chain-specific deployments beyond Ethereum (Arbitrum, Base, etc.) are not covered explicitly. • Risk inference: Given absence of critical issues and only one high-severity finding, residual known risk from this round centers on medium findings whose disposition is unknown.

• Scope – SpeedJump IRM (interest rate module): Security review of the SpeedJump IRM implementation used by Morpho Blue markets; classified findings: 2 High (1 fixed, 1 acknowledged), 1 Medium (acknowledged), 1 Low (fixed), 5 informational (2 fixed, 3 acknowledged). • Date – SpeedJump IRM: 2023-09-28. • Scope – Fixed-rate IRM: Separate audit focused on Morpho Blue’s fixed-rate interest rate module; findings: 1 Medium (fixed) and 2 informational (1 fixed, 1 acknowledged). • Date – Fixed-rate IRM: 2024-02-23. • Links: Both reports hosted on Cantina portfolio pages. • Fix status: As above; all medium and low findings in these IRM modules are marked fixed, with some high and informational issues explicitly acknowledged rather than changed. • Bytecode / deployed-code match: Cantina reports identify repositories/files, not deployed bytecode; no explicit on-chain matching – Not verifiable as of 2026-08-27. • Covers deployed code: These audits directly cover Morpho Blue’s IRM periphery that influences yield and rate dynamics for all chains using SpeedJump or fixed-rate IRMs; however, which specific markets on Arbitrum, Base, OP, Polygon, etc., use these exact audited IRMs versus other configurations is Not verifiable as of 2026-08-27.

Morpho Blue has been audited by ChainSecurity, a Swiss security firm repeatedly used by Morpho Labs for major upgrades of Morpho Aave and Morpho Blue. The available reports focus on the core lending and risk engine contracts of Morpho Blue on Ethereum; some audits pre‑date deployment of all currently listed chains (Arbitrum, Base, OP, Polygon, etc.), and cross‑chain deployments are not individually covered in public reports.

Code Assessment of the Morpho Vault V2 Smart Contracts

New report in registry.

New report identified: Spearbit review of Morpho Blue Periphery Pre-Liquidation. The report file is dated 2024-10-29 and the audit registry identifies the same publication date.

New report identified: Cantina managed review of Morpho Blue Public Allocator. The Morpho audit registry lists publication date 2024-03-11; the engagement reviewed commit 1cdcee8d during 2024-02-19–2024-02-23.

New report in registry.

New report identified: ABDK Consulting review of Morpho Blue Periphery Pre-Liquidation, dated 2024-11-01 in the audit registry and report filename.

metamorpho cantina managed review audit report; file audits/2023-11-14-metamorpho-cantina-managed-review.pdf in morpho-org/metamorpho (protocol audit catalog).

morpho blue and speed jump irm open zeppelin audit report; file audits/2023-10-13-morpho-blue-and-speed-jump-irm-open-zeppelin.pdf in morpho-org/morpho-blue (protocol audit catalog).

morpho blue cantina competition audit report; file audits/2024-01-05-morpho-blue-cantina-competition.pdf in morpho-org/morpho-blue (protocol audit catalog).

morpho blue cantina managed review audit report; file audits/2023-11-13-morpho-blue-cantina-managed-review.pdf in morpho-org/morpho-blue (protocol audit catalog).

morpho blue periphery open zeppelin audit report; file audits/2023-11-16-morpho-blue-periphery-open-zeppelin.pdf in morpho-org/metamorpho (protocol audit catalog).

• Scope: Morpho Blue core smart contracts (lending market, interest rate logic, liquidations). The Infrared Trading security page explicitly lists an OpenZeppelin review of Morpho Blue core. • Date: October 2023. • Link: Listed on Morpho’s official audits page under Morpho Blue; exact URL not reproducible here. • Severity findings: Not detailed publicly in the Infrared summary; it states no critical vulnerabilities reported at time of audit. • Fix status: Infrared notes the reviews as part of production-hardening; individual issue status not broken out. • Bytecode / deployed-code match: Not verifiable as of 2026-08-27 (no public statement that the audited commit hash was matched against mainnet bytecode). • Chain coverage: This is a core-protocol audit, primarily relevant to Ethereum mainnet deployment; extension of coverage to other listed chains (Arbitrum, Base, OP, Polygon, etc.) cannot be confirmed from the report alone. • Finding coverage for current deployments: Whether later deployments (e.g., additional chains, new markets) still run the audited version is Not verifiable as of 2026-08-27.

Audit of Morpho Blue and the SpeedJump IRM (Interest Rate Model)

Several secondary sources and community posts assert additional audits for Morpho Blue (e.g., incremental reviews for new markets or integrations), but they either lack direct links to auditor‑hosted reports or cannot be matched unambiguously to the currently deployed Morpho Blue contracts on the specified chains.

periphery cantina competition audit report; file audits/2024-01-05-periphery-cantina-competition.pdf in morpho-org/metamorpho (protocol audit catalog).

Morpho Labs engaged Runtime Verification to audit components of the Morpho lending stack, including formal methods review of core protocol logic. Publicly accessible information confirms involvement but not the exact report for Morpho Blue specifically, and no full issue list is available.

Morpho Blue core smart contract security review

Spearbit/Cantina managed review; publication date: 2023-10-16 per Morpho’s audit registry. Scope: Morpho Blue core at commit 11e69…810c53; review period was 2023-09-28 to 2023-10-16. Covers deployed code: Not verifiable as of 2026-09-04; bytecode matching across the listed deployment chains was not performed.

• Scope: Morpho Blue core smart contracts; described as a Cantina/Spearbit-managed review of the core protocol. • Date: November 2023 (per Infrared’s chronology: core reviews in Oct–Nov 2023). • Link: Listed on Morpho audits page as “Morpho Blue – Cantina-managed review”; report URL not reproducible here. • Severity findings: External summaries (Defi-intel, Infrared) state no critical issues remained at the time of deployment, but do not enumerate high/medium/low counts. • Fix status: Described as part of the pre-launch hardening; given the live deployment and lack of reported core exploits, material findings are implied fixed or mitigated, but exact per-issue status is Not verifiable as of 2026-08-27. • Bytecode / deployed-code match: Not verifiable as of 2026-08-27. • Covers deployed code: All public descriptions state this was a review of the production-intent core; however, whether every chain’s deployment (Arbitrum, Base, OP, Polygon, etc.) uses the exact audited bytecode is Not verifiable as of 2026-08-27.

• Scope: Vault-level and curator-level configurations for vaults interacting with Morpho Blue (and other protocols). This is not a core smart-contract audit; it focuses on configuration and governance risk at the vault/curator layer. • Date: 2026-05-08. • Link: Yelty “Vault-Level & Curator-Level Audit Report” for multiple protocols, including Morpho Blue. • Severity findings: Yelty describes this as an automated DeFi risk audit; the public summary does not break down findings by critical/high/medium categories for Morpho Blue specifically – Not verifiable as of 2026-08-27. • Fix status: Not stated; this is more a continuous-scan style assessment than a traditional targeted audit – Not verifiable as of 2026-08-27. • Bytecode / deployed-code match: Not applicable; focuses on vault/curator configuration rather than core bytecode. • Covers deployed code: Relevant for institutional use of Morpho Blue via MetaMorpho or other vault wrappers across all chains where such vaults exist, but exact chain-specific coverage is Not verifiable as of 2026-08-27.

Assessment: Morpho Blue is operated by Morpho Labs and has a substantially public, identifiable leadership team and credible evidence of a functioning Paris-based operating organization. It is not merely an anonymous web front. However, legal-entity changes and a 2025 frontend incident require ongoing diligence.

• Founders and public status: Public sources identify Paul Frambot, Merlin Egalite, Mathis Gontier-Delaunay, and Julien Thomas as founders or early co-founders of Morpho Labs. Frambot is publicly identified as co-founder/CEO and president of the Morpho Association; the other named technical and research leaders have public professional profiles.
• Prior outcomes: Morpho was founded in 2021 and developed open-source lending infrastructure. The team’s public technical and institutional footprint includes research, audited smart contracts, formal verification, and integrations with major DeFi infrastructure. These establish operating credibility, but do not eliminate protocol or governance risk.
• Security history: In April 2025, a faulty Morpho frontend update created a vulnerability affecting a user address and exposing approximately $2.6 million. A white-hat MEV operator intercepted the funds; Morpho reverted the update and stated that protocol funds were unaffected. This was a frontend/application-security incident, not evidence that the Morpho Blue core contracts were drained. Morpho also disclosed an AaveV3-ETH Optimizer vulnerability in June 2023.
• Real office and operating presence: Independent institutional and recruiting sources place the organization in Paris and describe a real hybrid/remote workforce. The French association’s registered office is reported as 24 rue de Clichy, 75009 Paris. This supports a genuine operating presence, although a registered address is not proof of a staffed office.
• Legal structure / jurisdiction: Current reporting describes a French nonprofit, Morpho Association, owning a Delaware subsidiary, Morpho Labs Inc., primarily used for U.S. hiring. The original French Morpho Labs SAS was reported as removed from the Paris commercial register in April 2026. Therefore, the structure is neither purely offshore nor purely French: governance/association elements are onshore in France, with a U.S. Delaware operating subsidiary.
• Reality-check conclusion: Public founders, named technical personnel, a documented legal structure, external reporting, recruiting activity, and disclosed security practices support a real business. Main diligence concerns are entity-transition clarity, dependence on a relatively young team, and the demonstrated risk of frontend operational errors. Claims originating only from Morpho’s own documentation should be treated as unverified marketing claims unless independently corroborated. On-chain verification: Not verifiable as of October 3, 2026. Founder identity, office, legal structure, and the incident history are off-chain findings; no current on-chain query evidence was available for this review.

Reputation assessment: Morpho currently has a generally strong security and institutional reputation, but its risk profile remains materially exposed to oracle design, curator behavior, frontend integrity, governance concentration, and isolated-market failures. The available search evidence does not substantiate fraud, a rug pull, protocol-wide insolvency, sanctions, or regulatory enforcement. On-chain verification was unavailable: Not verifiable as of October 10, 2026.

• Founders and investors: Public profiles identify Paul Frambot, Mathis Gontier Delaunay, and Merlin Egalité as founders. Morpho is reported to have raised approximately $70 million historically, with a later reported $175 million raise co-led by Paradigm, Andreessen Horowitz crypto, and Ribbit Capital. These financing figures were not independently verified in this run and should be treated as reported, not conclusive evidence of solvency or governance quality.
• Auditors and security posture: Reported audit coverage includes Spearbit, ChainSecurity, Certora, OpenZeppelin, Cantina, Blackthorn, Trust Security, and others. Morpho’s audit catalogue lists recent 2026 reviews, while independent summaries report more than 25 audits and a bug bounty of up to $2.5 million. Audits reduce but do not eliminate smart-contract, oracle, economic, or operational risk.
• Security incidents and criticisms: A reported April 2025 frontend vulnerability created an attempted $2.6 million exploit that was intercepted before funds were stolen; the core contracts were reportedly unaffected. A separate October 2024 PAXG/USDC market incident reportedly involved approximately $230,000 and was attributed to oracle misconfiguration. A later report alleged roughly $1 million of exposure across two isolated markets during an April 2026 exploit affecting another lending ecosystem; this claim was not independently confirmed.
• Sentiment and unresolved concerns: Coverage is predominantly favorable but acknowledges dependence on market oracles, liquidations, immutable contracts, curator selection, and governance. A reported September 2026 incident involving a deleted post about curator businesses allegedly relying on private off-chain distribution agreements raises transparency and business-model concerns, but the account was attributed to a third-party marketing-tool error.
• Legal, regulatory, sanctions, fraud, and insolvency: No substantiated allegation or enforcement action was found in the retrieved results. Legal/regulatory status, sanctions screening, treasury claims, and protocol-wide solvency remain: Not verifiable as of October 10, 2026. Overall institutional view: reputable and well-audited, with credible investors and no identified rug/fraud record in the retrieved evidence; nevertheless, isolated-market, oracle, frontend, curator, and governance risks warrant controls separate from reliance on audit count or investor pedigree.

Economic model — as of October 5, 2026 Morpho Blue is a permissionless, peer-to-pool lending primitive. Each isolated market fixes one ERC-20 collateral asset, one loan asset, an oracle, LLTV, and interest-rate model. Lenders supply the loan asset and earn borrower-paid variable interest; borrowers post collateral and borrow the loan asset.

Collateral itself generates no protocol yield. Yield / exposure. Base yield is primarily organic borrower interest, driven by utilization and the market’s IRM; rewards or boosted vault returns may be external/subsidized. The organic/subsidized split is Not verifiable as of October 5, 2026. The primitive is not market-neutral: lenders retain loan-asset, liquidity, oracle, counterparty/liquidation, and market-specific smart-contract exposure.

Collateral exposure is directional and depends on the selected asset. Restaking, liquid-staking, BTC, stablecoin, or other external exposure is market-specific rather than inherent to Blue. Leverage / looping. Morpho Blue permits borrowing against collateral, and users can construct recursive leverage through integrations or repeated markets, but there is no protocol-wide leverage target or aggregate looping ratio. Not verifiable as of October 5, 2026. Withdrawals / lock-ups / limits. No protocol-wide maturity or lock-up is specified. Suppliers may withdraw principal and accrued interest only when sufficient market liquidity exists.

Borrowers must repay debt before withdrawing collateral; positions above LLTV can be liquidated. Market parameters are immutable after creation, while LLTV and IRM choices are governance-approved. Public Allocator/Vault V2 liquidity can improve access but may impose caps, penalties, or reallocation constraints. Fees and revenue. DeFiLlama reports 30-day fees of approximately $19.97m, but $0 protocol revenue; fees represent borrower interest and liquidation-related amounts, not retained Morpho earnings. TVL / trend. DeFiLlama reports $11.478bn TVL, +16.6% over 30 days; active loans are $5.564bn.

Ethereum ($5.217bn; 45.5%) and Base ($4.589bn; 40.0%) dominate, followed by Robinhood Chain ($599m), Arc ($322m), Monad ($192m), and Hyperliquid L1 ($173m). Product-level TVL, APY history/volatility/sustainability, and Dune-vs-Llama reconciliation are Not verifiable as of October 5, 2026 because Dune MCP is unavailable. Contradiction / scope note: DeFiLlama currently tracks 45 chains, materially broader than the 12-chain input list; the figures above therefore represent the full tracked protocol, not only the supplied chains.

Assessment (as of October 5, 2026). Morpho Blue is an immutable, non-custodial lending primitive; user deposits are not protocol reserves. Relevant protocol-controlled resources are primarily MORPHO token allocations and any fee-switch proceeds. Governance controls the MORPHO treasury, token-contract ownership, LLTV/IRM whitelisting, and the fee switch, capped at 25% of borrower interest, through Snapshot-approved actions executed by a 5-of-9 Safe. Identified custody/control.

• DAO governance Safe: Ethereum/Base 0xcBa28b38103307Ec8dA98377ffF9816C164f9AFa, Gnosis Safe 5-of-9; controls DAO treasury actions and token administration.
• Rewards Safe: Ethereum 0xF057afeEc22E220f47AD4220871364e9E828b2e9, with the same operational address reportedly used across Base, Polygon, OP Mainnet, and Katana; 3-of-5 multisig.
• Morpho Association Master Safe: Ethereum/Base 0x6abfd6139c7c3cc270ee2ce132e309f59caaf6a2, 3-of-8; holds Association-controlled funds. Composition/policy. MORPHO is the principal disclosed reserve asset. Morpho’s documentation reports 35.4% of total supply controlled by governance, 6.3% allocated to the Association, and 5.8% reserved for contributors; these are allocation figures, not current balances. Blockworks’ June 18, 2026 filing reports different allocation figures (32.08% DAO treasury; 6.3% Association) and states that the Association is funded through DAO MORPHO grants and sales. This is a documented source contradiction; current on-chain balances would be authoritative but are unavailable here. Fees/attestations. The fee switch was reported off as of June 17, 2026; no verified fee-distribution, buyback, burn, or staking mechanism was identified. No independent reserve attestation or audited treasury balance was found after separate searches. Not verifiable as of October 5, 2026. On-chain balances via Dune. Dune MCP was unavailable; therefore multi-chain wallet balances, token composition, USD valuation, and chain-level exposure percentages are Not verifiable as of October 5, 2026. No liabilities attributable to a treasury entity were identified; protocol user debt is not a treasury liability.

Assessment — as of October 3, 2026. Morpho Blue has no separate native token; it uses the ecosystem-wide Morpho (MORPHO) governance token.

• Contracts: Ethereum 0x58D97B57BB95320F9a05dC918Aef65434969c2B2; Base 0xBAa5CC21fd487B8Fcc2F632f3F4E8D37262a0842; Arbitrum 0x40BD670A58238e6E230c430BBb5cE6ec0d40df48; Katana 0x1e5eFCA3D0dB2c6d5C67a4491845c43253eB9e4e. The Ethereum legacy token is 0x9994E35Db50125E0DF82e4c2dde62496CE330999. Deployments on the other user-listed chains: Not verifiable as of 2026-10-03.
• Supply/valuation: maximum and total supply are approximately 1.0bn MORPHO; circulating supply is approximately 699.93m. CoinGecko reports price $2.57, market cap $1.798bn, and FDV $2.569bn; these are aggregator figures, not on-chain verified.
• Utility/governance: voting power, delegation, Snapshot voting, treasury control, LLTV/IRM whitelisting, fee-switch control, and token-contract ownership. Governance execution is through a 5/9 multisig.
• Value accrual: no documented staking yield, dividends, buybacks, or protocol-funded burns. DefiLlama lists fee switch off, buybacks/dividends/burns absent, but its latest displayed update is May 7, 2026 (stale versus the seven-day standard).
• Emissions/unlocks: allocations: governance 35.4%, strategic partners 27.5%, founders 15.2%, Association 6.3%, contributor reserve 5.8%, early contributors 4.9%, users/launch pools 4.9%. Published vesting includes founders through May 17, 2028 and strategic-partner cohort 3 through November 21, 2027. Whether each announced unlock occurred on-chain: Not verifiable as of 2026-10-03.
• Concentration/insiders: top-holder concentration and insider-wallet attribution: Not verifiable as of 2026-10-03.
• Controls: new token is upgradeable and governance-owned; no role-based permissions are documented, and users can burn their own tokens. Mint authority/blacklist status after deployment: Not verifiable as of 2026-10-03.
• Liquidity/listings: DEX liquidity depth: Not verifiable as of 2026-10-03. Main reported CEX markets include Binance, OKX, Coinbase, Bybit, Gate, and MEXC; CoinGecko reports roughly $31.9m 24-hour volume.

## Stress scenario: BTC falls below $10,000 A collapse in Bitcoin’s price would create severe liquidation and bad-debt risk for Morpho Blue markets using BTC-linked collateral such as cbBTC or WBTC. Positions become liquidatable when collateral value breaches each market’s immutable LLTV; rapid price declines can push collateral below outstanding debt before liquidators complete execution. Morpho’s own risk documentation explicitly identifies this as a path to bad debt.

The impact is market-specific rather than automatically protocol-wide. Morpho Blue isolates markets by collateral, loan asset, oracle, LLTV, and interest-rate model, so losses in one BTC market do not mechanically transfer to unrelated markets. However, lenders and vault depositors in the affected market can absorb losses if collateral sales do not cover debt.

Oracle performance is a principal stress variable. Each market has a fixed oracle, and a stale, delayed, manipulated, or otherwise faulty BTC price can either trigger premature liquidations or delay liquidations and increase bad debt. Morpho states that no oracle is immune to manipulation.

Available search results identify substantial cbBTC/USDC markets on Base and Ethereum, but these figures are aggregator data rather than raw on-chain verification and are not sufficient to establish current total BTC-linked exposure across all requested chains. Cross-chain exposure percentages, outstanding debt, collateral balances, liquidation capacity, and the precise BTC-backed market inventory are Not verifiable as of October 10, 2026. > Contradiction / evidence limitation: Market dashboards report BTC-linked market values, while the required raw on-chain validation is unavailable in this run. The dashboard figures therefore cannot be treated as on-chain verified. Risk assessment: Very high for BTC-collateral lenders, vaults allocating to BTC markets, and borrowers near LLTV; lower and structurally contained for unrelated isolated markets.

The scenario also creates liquidity and contagion risk within each affected market, especially where stablecoin liquidity or liquidator capacity is insufficient.

Assessment — not verifiable. A protocol-wide estimate of losses from a 20% depeg of Morpho Blue’s largest collateral is Not verifiable as of October 3, 2026. The available results do not establish the current largest collateral asset, its exposure by each requested chain, market-level borrow/collateral balances, oracle behavior, LLTV distribution, or liquidation liquidity. Therefore, no defensible dollar loss, bad-debt amount, or chain allocation can be calculated. Mechanics relevant to the stress:

• Morpho Blue markets use immutable, market-specific liquidation loan-to-value (LLTV) parameters; positions become liquidatable when their LTV exceeds the market’s LLTV.
• A 20% collateral-price decline does not automatically create bad debt: positions with sufficient buffer below LLTV may remain solvent, while highly levered positions become liquidatable.
• If collateral value falls below outstanding debt before liquidation, liquidation may fail to recover the full loan and the residual becomes bad debt borne by lenders in that market.
• The stress outcome depends on position leverage, liquidation incentives, oracle update timing, market liquidity, and the collateral/debt pair—not simply on aggregate TVL. Chain scope: Exposure percentages across Arbitrum, Base, Ethereum, Hyperliquid L1, Katana, Monad, OP Mainnet, Polygon, Robinhood Chain, Stable, Tempo, and Unichain are Not verifiable as of October 3, 2026 from the available evidence. DeFiLlama results provide aggregator-level chain figures for only part of the relevant set and do not identify the largest collateral or permit a 20% depeg loss calculation. > Finding: The previously unresolved result remains unresolved. The available evidence supports the liquidation and lender-loss mechanics, but not the requested protocol-wide stress quantification. Any numerical estimate would be speculative.

Stress case — largest borrower/counterparty becomes insolvent (Morpho Blue) Exposure identification: The identity and size of the current top counterparty across Arbitrum, Base, Ethereum, Hyperliquid L1, Katana, Monad, OP Mainnet, Polygon, Robinhood Chain, Stable, Tempo, and Unichain are Not verifiable as of October 3, 2026 because Dune/on-chain verification is unavailable. The mechanism below applies independently to each affected Morpho Blue market and chain. Expected loss path: 1. A collateral-price fall or debt accrual pushes the borrower’s LTV to/above the market’s immutable LLTV.

2. A permissionless liquidator calls liquidate(), repaying some or all debt and receiving collateral valued at the oracle price plus the market’s liquidation incentive factor (LIF). 3.

If collateral is exhausted before all debt is repaid, the residual is bad debt. This is the lender loss; there is no protocol-level guarantee that makes the borrower whole. Who absorbs it / compensation: Direct suppliers in that specific market absorb the shortfall proportionally through reduced market-level supply assets/share value. Other Morpho Blue markets and chains are not directly charged.

The liquidator—not Morpho—receives the liquidation bonus; Morpho’s core contract takes no liquidation fee. No separate Morpho Blue insurance or automatic treasury compensation was identified: Not verifiable as of October 3, 2026. Smart-contract impact path: Once the borrower’s collateral reaches zero, the core contract calculates residual badDebtAssets/badDebtShares, decreases totalBorrowAssets, totalSupplyAssets, and totalBorrowShares, and clears the borrower’s remaining borrow shares. Supply shares remain outstanding, so the market’s redeemable value per supply share falls; withdrawals may also be constrained by remaining liquidity. > Contradiction/recheck: The prior finding is confirmed for direct Morpho Blue suppliers.

Current documentation discussing Vault V2/V1 loss socialization describes wrapper-specific accounting and should not be conflated with Blue’s core market accounting.

Assessment: no verified evidence that Morpho Blue, the Morpho DAO, or its owners committed fraud as of October 3, 2026. On-chain verification is unavailable for this run, so treasury movements, governance execution, ownership, and claimed fee flows are Not verifiable as of 2026-10-03. The available evidence distinguishes protocol incidents from fraud:

• A 2025 frontend vulnerability reportedly placed approximately $2.6 million at risk, but a white-hat actor intercepted the exploit and the funds were secured; this is not evidence of DAO or owner-committed fraud.
• A December 2024 PAXG/USDC market incident involved incorrect oracle decimal configuration and approximately $230,000 borrowed against insufficient collateral. The available account characterizes this as a market-configuration failure, not proven intentional misconduct.
• The March 2026 Resolv USR depeg reportedly caused losses or bad debt in affected collateral markets, while Morpho’s core contracts were not exploited. This is external-collateral/curator risk, not evidence of fraud by Morpho governance.
• A risk report alleges that more than $256 million in cumulative protocol fees were directed to the Morpho Association rather than the DAO treasury and describes unresolved disclosure concerns around MIP 94. This is a governance and transparency red flag, but the available source does not establish theft, deception, or criminal fraud.
• A token-transparency filing states that no exploit affecting MORPHO holders, protocol-treasury funds, or core Morpho DAO/Morpho Association treasuries had occurred as of June 17, 2026. This is an external transparency report, not an independent on-chain verification.
• No SEC enforcement result linking Morpho to fraud was identified in the searched material. A regulatory speech concerning possible legal treatment of discretionary DeFi curators is not an enforcement action. Stress conclusion: treat governance concentration, fee-routing transparency, curator discretion, and market-configuration errors as material risks. Do not classify the protocol as having committed DAO/owner fraud based on the currently available evidence. Any definitive treasury or governance-fraud determination is Not verifiable as of 2026-10-03.

Stress conclusion: If Morpho Blue’s primary yield source is negative over 30 days, the stress should be treated as a cash-flow and liquidity event, not as a protocol-wide loss automatically. Morpho Blue is composed of isolated, immutable markets; lender yield principally comes from borrower interest, while any additional strategy yield depends on the specific vault or external strategy. Market-level losses therefore do not automatically propagate across all markets. Expected transmission channels

• Negative net yield can cause lenders to withdraw or reallocate, reducing liquidity and increasing utilization and borrow rates in affected markets.
• Borrowers with thin collateral buffers may become vulnerable as interest accrues and collateral prices fall. Positions above a market’s immutable LLTV become liquidatable.
• The principal tail risk is bad debt if collateral cannot be liquidated at sufficient value, particularly where the oracle is stale, manipulated, centralized, or incorrectly configured. Morpho’s risk documentation explicitly notes that oracle failures can cause wrongful liquidations or bad debt.
• Because markets are isolated, the first-order loss is expected to remain market-specific; however, correlated collateral, shared lenders, vault allocation decisions, and liquidity flight can transmit economic stress across markets even without smart-contract contagion. 30-day monitoring thresholds
• Track realized lender APY, borrower APY, utilization, supplied liquidity, borrow liquidity, liquidation volume, bad-debt indicators, oracle freshness, and vault-level withdrawals separately for every chain and market.
• Treat a negative 30-day yield as not verifiable as of October 3, 2026 from the available evidence: the retrieved analytics result reports aggregate 30-day fees, not a clean, chain-by-chain realized-yield series for Morpho Blue.
• Chain-level exposure, current TVL allocation, and the percentage of total exposure on Arbitrum, Base, Ethereum, Hyperliquid L1, Katana, Monad, OP Mainnet, Polygon, Robinhood Chain, Stable, Tempo, and Unichain are Not verifiable as of October 3, 2026 because on-chain verification was unavailable. Security context: Public documentation reports extensive audits and an Immunefi bounty, but audits do not eliminate oracle, market-parameter, liquidation, or external-strategy risk. The cited third-party reports are not sufficient to establish a current, independently verified system-wide absence of incidents. Assessment: Under this scenario, downgrade affected markets and any vault concentrated in them to high liquidity and loss-given-default risk until positive realized yield, adequate exit liquidity, sound oracle operation, and sufficient liquidation depth are independently demonstrated. A negative yield reading alone does not prove insolvency; persistent negative carry combined with withdrawals, rising utilization, impaired liquidation liquidity, or oracle stress does.

Assessment as of October 13, 2026: Morpho has hybrid, limited-scope governance—not a fully autonomous DAO. Morpho Blue markets and their market parameters are immutable after deployment; governance cannot upgrade core Blue markets or directly withdraw user positions. MORPHO governance controls the treasury, upgradeable MORPHO token contract, fee switch and recipient (fee capped at 25% of borrower interest), approved LLTVs/IRMs, protocol-license ENS records, and the morpho.eth ENS domain.

Proposal process: forum discussion → Snapshot vote by MORPHO holders → execution by the governance Safe. Proposal submission requires at least 500,000 MORPHO, unless changed by governance. The documented governance Safe is 5-of-9 at 0xcBa28b38103307Ec8dA98377ffF9816C164f9AFa, used on Ethereum and Base.

Current signer identities, geographic/entity independence, and whether all signers are independent are Not verifiable as of October 13, 2026. Timelock: No current core-governance timelock duration or enforced execution delay was established from the reviewed evidence; Not verifiable as of October 13, 2026. Historical forum material proposed a 24-hour DAO timelock, but this does not verify current implementation.

Control split: Morpho Association, a French association, operates/administers the Morpho frontend and services, hosts documentation and GitHub repositories, and holds stated IP. Its registered office is 24 rue de Clichy, 75009 Paris; RNA W751263773; SIREN 911 156 933; EU VAT FR44911156933. Directors/representatives are Not verifiable as of October 13, 2026.

The terms disclaim custody or control of user crypto-assets. Top MORPHO holders, voting concentration, and cross-chain exposure via Dune: Not verifiable as of October 13, 2026. No on-chain verification was performed.

The DAO is therefore operationally real for specified parameters and treasury actions, but symbolic as a complete protocol-control layer; under the requested definition, dao_governance=false. Rewards multisigs are separate from core governance and are documented as 3-of-5 on Ethereum and Base.

Legal & regulatory assessment (as of October 10, 2026):

• Entity / jurisdiction: The identifiable interface and services entity is Morpho Association, a French not-for-profit association registered at 24 rue de Clichy, 75009 Paris, SIREN 911 156 933, VAT FR 44911156933. French law governs its Terms of Use; Paris courts have jurisdiction for specified consumer disputes. A separate SEC Form D identifies “Morpho Labs, a series of GCR JK LLC,” a Delaware vehicle; this should not be conflated with the French association or treated as proof it operates Morpho Blue.
• Legal classification / actual structure: Morpho Association describes itself as protocol steward, while Morpho Blue is permissionless, non-custodial software. The Association states it does not custody assets, operate vaults, or act as an investment adviser. Its Terms claim the protocol is not a regulated financial service and that the Association is not subject to MiCA or another financial regime; this is a self-characterization, not a regulator determination. The Terms also distinguish Association-operated interfaces from the protocol itself, creating a material gap between contractual controls and base-layer protocol exposure.
• ToS / restrictions / KYC-AML: Interface users must be adults, comply with local law, and not be sanctioned or located in restricted territories. VPN circumvention, money laundering, terrorist financing, sanctions evasion and unlawful use are prohibited. The Association may use geolocation, wallet data, blockchain analytics and sanctions-screening providers, and may suspend interface access. This is wallet-/interface-screening rather than conventional account KYC; no universal protocol-level KYC requirement was verified.
• Data protection: The Association identifies itself as GDPR data controller and describes rights of access, correction, deletion, objection, portability and complaint. It warns that public-chain wallet data and transaction history are immutable and cannot be rectified or erased by it; data may be transferred outside the EEA/UK.
• Warnings / enforcement / cases: No protocol- or Morpho Association-specific regulator enforcement, sanctions designation, or court case was located in the reviewed official-source searches. The 2017 DOJ “Morpho Detection” antitrust case concerns an unrelated entity and is excluded under the name-collision check. Risk conclusion: Contractual restrictions and screening apply primarily to Morpho-operated interfaces; they do not eliminate legal, sanctions, consumer-protection, AML or data-protection exposure arising from permissionless smart-contract use, third-party interfaces, curators, or users’ jurisdictions.

No exact GLEIF LEI record for 'Morpho Association', 'Morpho Labs'. OFAC SDN screening of 'Morpho Association', 'Morpho Labs': no match. SEC litigation and administrative release feeds: no mention.

Morpho Blue does not issue its own stablecoin; it is a permissionless lending primitive where markets can use third-party assets such as USDC, USDT, DAI, PYUSD, or USR, so there is no Morpho-native stablecoin depeg to count. A third-party incident involving Resolv USR depegging in March 2026 affected some Morpho vault users, but the available sources do not support a protocol-wide depeg count, exact last depeg date, or max depeg percentage for Morpho Blue itself. Not verifiable as of 2026-10-05: depeg_count, last_depeg_date, max_depeg_pct, stablecoin_ids.

Morpho Blue’s core architecture isolates markets but makes risk selection permanent and market-specific: oracle designers, market creators, curators, and users determine much of the effective risk. The principal residual risks remain oracle failure, liquidation shortfalls, asset/issuer impairment, permissionless configuration, and undiscovered contract defects; chain-by-chain exposure and current bad-debt levels are Not verifiable as of October 5, 2026.

Morpho Blue’s top 5 strengths are: capital efficiency from isolated markets, which lets each market set its own risk parameters without being constrained by a riskier asset basket; better rates for lenders and borrowers because the design improves capital utilization and reduces spread; low gas costs because the core is a very small, lean contract design; permissionless market creation and flexible asset listing, which makes it easy to launch new isolated markets; and minimal governance / strong trust minimization, since the core is immutable and governance scope is intentionally limited. These strengths are consistent with Morpho’s own documentation and GitHub materials, which describe Morpho Blue as a trustless, efficient lending primitive with permissionless market creation, isolated markets, and low gas consumption.