Morpho Onchain

Identification — with name-collision caveat. I could not locate an independently documented protocol specifically named “Morpho Onchain” or slug morpho-oc. The closest verified match is the Morpho protocol, specifically Morpho Blue; therefore, this mapping is not fully confirmed. Not verifiable as of October 10, 2026.

• Name/category: Morpho / Morpho Blue; non-custodial, overcollateralized DeFi lending with permissionless, isolated variable-rate markets.
• Website/docs: morpho.org; developer documentation at docs.morpho.org.
• Launch: Morpho Optimizer launched in June 2022; Morpho Blue code/whitepaper were released in October 2023, with production deployment in early 2024.
• Chains: The supplied scope is Ethereum. Morpho Blue is also deployed across multiple EVM chains, but this review does not extend exposure analysis beyond Ethereum.
• Native token: MORPHO governance token; Ethereum address 0x58D97B57BB95320F9a05dC918Aef65434969c2B2. Ethereum contract cross-check. Official deployment documentation and linked Etherscan records identify: Morpho core: 0xBBBBBbbBBb9cC5e90e3b3Af64bdAF62C37EEFFCb; AdaptiveCurveIRM: 0x870aC11D48B15DB9a138Cf899d20F13F79Ba00BC; ChainlinkOracleV2 Factory: 0x3A7bB36Ee3f3eE32A60e9f2b33c1e5f2E83ad766. Dune cross-check is unavailable in this run; therefore the required two-source confirmation, including Dune, is Not verifiable as of October 10, 2026. Explorer verification status: Not verifiable as of October 10, 2026 (the official page links explorer records, but direct verification status was not independently confirmed). Fork lineage. Morpho Blue is not presented as a fork of Aave, Compound, or another upstream codebase; it is a redesigned successor to Morpho Optimizer. Changes include isolated one-collateral/one-loan markets, immutable core logic, permissionless market creation, and externalized risk management. The Morpho Blue repository contains multiple audits/reviews, including OpenZeppelin, Spearbit, and Cantina. A documented history of malicious modifications in similar Morpho forks is Not verifiable as of October 10, 2026.

Morpho Onchain appears to be a real, functional product rather than a pure landing page: the public app and docs describe live supply/borrow/position-management flows, and the docs include explicit deposit/withdrawal integration guidance plus an API playground and SDK for app builders. The product maturity is above a simple marketing site because the documentation is structured, current, and references concrete transaction routes, but there is no on-chain verification available in this run for live deposits/withdrawals, volumes, or any claimed metrics, so those remain Not verifiable as of 2026-10-10. There is evidence of an open API: Morpho documents a GraphQL API and REST APIs for Blue, Midnight, vaults, and positions, and says the API is the recommended/default data layer for apps and research.

The SDK docs also imply a developer-facing integration stack rather than a closed consumer-only portal. I did not find web evidence of broken links, fake metrics, or obvious template-site signs in the materials retrieved; however, that absence is not a clean audit, so those points are Not verifiable as of 2026-10-10. On balance, the site/docs look like a mature protocol portal with live product surfaces and developer APIs, not a dummy landing page.

Morpho Onchain has an active bug bounty program on Immunefi. The program was live since 17 June 2022, and Morpho’s own docs say reports must include a PoC with an end-effect impacting an in-scope asset. The program scope covers smart contracts and front-end.

Public references also show the maximum critical reward was later raised to $2.5M. Reported result: Morpho disclosed at least one paid bounty of $285,000 for a June 2023 vulnerability report submitted through Immunefi.

Identity / scope: The label morpho-oc could not be matched to a uniquely identifiable Ethereum contract, vault, or market from authoritative public sources. Therefore, exposure percentages and active dependency incidents are not verifiable. Dependency map: Morpho Blue is a non-custodial, isolated-market lending primitive. Each market independently specifies its loan asset, collateral, oracle, LLTV and interest-rate model; dependencies therefore vary by market rather than being protocol-wide.

• External protocols: Potential exposure includes the underlying collateral/loan-token issuers and, for vaults, the selected Morpho markets or adapters. Vault curators/allocators can determine market allocation; Vault V2 supports adapters and risk caps, creating operational and configuration dependency on those roles.
• Oracles / manipulation: Material risk. Liquidations depend on each market’s oracle price. Morpho supports Chainlink-compatible feeds and community/custom adapters, including feeds based on DEX prices, NAV/ERC-4626 conversion rates, LST/LRT exchange rates and other sources. A stale, manipulated, misconfigured or depegged feed can cause under-liquidation, bad debt or wrongful liquidation.
• Bridges / custodians / CEX-MM: No protocol-level bridge or custodian dependency was identified. CEX/market-maker reliance is not inherent to Morpho Blue, but liquidity and price discovery for thin assets may depend on external venues. For this specific deployment: Not verifiable as of October 10, 2026.
• RWA issuer/SPV: Not inherent to Morpho. RWA exposure may arise if the unidentified deployment lends against tokenized credit or issuer-backed assets; issuer, SPV, servicing and redemption risks are market-specific. Not verifiable as of October 10, 2026.
• Stablecoins / LSTs / restaking: These can be direct loan or collateral assets. Failure, depeg, oracle discontinuity, staking-provider failure, slashing or redemption impairment could trigger liquidations and losses. The specific assets and concentrations are Not verifiable as of October 10, 2026. Failure scenarios: oracle failure/manipulation; stablecoin depeg; collateral illiquidity; bad debt after liquidation; curator/allocator misconfiguration; adapter or underlying-token insolvency. No current active failure was confirmed. Data limitation: Dune on-chain verification was unavailable in this run; no exposure figure is inferred. Structured fields: dependency_failure_active: null; max_exposure_pct: null

Morpho on Ethereum is non-custodial at the protocol level: users retain control of their assets/private keys, and Morpho states it does not custody user funds or have access to user private keys. Vault deposits are represented by receipt tokens, and risk management is delegated to independent curators/role holders rather than the protocol itself. For institutional integrations, custody can be either custodial or noncustodial depending on the integrator’s wallet structure, but that is an integration choice, not a protocol-level custody requirement. Segregation: Morpho describes market risk as siloed by market, meaning failure or bad debt in one market does not spill over into others; vault-level allocation is also governed by curator-set parameters.

That supports an interpretation of segregated assets/risk at the market and vault level, but it is not the same as segregated legal custody accounts, so the custody segregation status is only partially verifiable from the available sources. Withdrawal paused: Not verifiable as of 2026-10-10.

Key-management organization — Morpho Onchain (Ethereum)

• Immutable core: Morpho Blue’s core lending contracts are designed as immutable, so there is no routine protocol upgrade key that can rewrite core lending logic. Governance retains only narrowly defined powers, including fee activation/recipient configuration, whitelisting LLTVs and interest-rate models, selected token-contract ownership, treasury control, and ENS administration.
• Governance execution: MORPHO holders vote through Snapshot; approved decisions are executed by a governance Safe. Morpho’s documentation currently identifies the Ethereum Safe as 0xcBa28b38103307Ec8dA98377ffF9816C164f9AFa, with a 5-of-9 threshold.
• Threshold-change contradiction: A later governance-forum record states that MIP-133 approved adding Spearbit and moving the DAO multisig to 6-of-10, with the new signer represented by a separate 2-of-2 multisig. However, the official address documentation still lists the older 5-of-9 configuration. The currently enforced Ethereum threshold and signer set are Not verifiable as of October 10, 2026 without direct on-chain verification.
• Rewards operations: A separate Ethereum MORPHO Rewards multisig is documented as 3-of-5 at 0xF057afeEc22E220f47AD4220871364e9E828b2e9.
• Vault-level keys are separate: For Morpho Vaults, permissions are divided among Owner, Curator, Allocator, and Sentinel/Guardian roles. Morpho recommends multisig or institutional MPC for high-impact Owner and Curator roles and explicitly discourages a single hot-wallet EOA in production. These are vault-operator controls, not necessarily Morpho DAO controls.
• Private-key custody details: Specific signer key-generation, storage, geographic separation, HSM/MPC implementation, backup, and rotation procedures are Not verifiable as of October 10, 2026 from the reviewed public sources. Risk view: The main control concentration is governance and vault-operator multisigs—not an upgradeable Morpho Blue core. The unresolved 5/9-versus-6/10 documentation discrepancy should be treated as an operational governance-control risk until confirmed on-chain.

Scope assumption: “Morpho Onchain” is treated as Morpho Blue on Ethereum, not a particular third-party MetaMorpho vault. A specific vault address would require separate role analysis. Ethereum addresses / verification

• Morpho Blue core: 0xBBBBBbbBBb9cC5e90e3b3Af64bdAF62C37EEFFCb
• Adaptive Curve IRM: 0x870aC11D48B15DB9a138Cf899d20F13F79Ba00BC
• ChainlinkOracleV2 factory: 0x3A7bB36Ee3f3eE32A60e9f2b33c1e5f2E83ad766 The addresses are listed against Ethereum and linked to explorer-verified source code. Architecture / admin risk ``text Users ──> Morpho Blue singleton (immutable, non-proxy) ├─ permissionless isolated markets │ ├─ loan token / collateral token │ ├─ oracle selected per market │ └─ enabled IRM + LLTV └─ optional MetaMorpho/Vault layers (separate contracts) ├─ owner / curator / guardian / allocator └─ timelocked caps, queues and allocations ` The core is a constructor-owned, non-upgradeable contract: no proxy implementation, proxy admin, pause function, emergency withdrawal, or strategy manager is present in the published Morpho contract. The owner can enable IRMs/LLTVs, change market fees (bounded by MAX_FEE`), change the fee recipient, and transfer ownership; it cannot arbitrarily transfer user principal. Exit / failure modes Users can repay/withdraw directly from Morpho Blue subject to market liquidity and solvency; the core cannot freeze assets. Oracle, collateral, IRM, token, liquidation and bad-debt risks remain market-specific. A compromised core owner could whitelist malicious IRMs/LLTVs or raise fees, but cannot upgrade, pause, or drain existing balances. MetaMorpho vaults are different: owners/curators/allocators can alter caps, queues and allocations; sensitive changes are timelocked, while allocators can rebalance immediately within configured bounds. A compromised vault role could create losses, impair liquidity, or redirect future yield, although this is not equivalent to an unrestricted core drain. Verification gaps: Proxy-admin type, current owner/fee recipient, renounced roles, exact on-chain timelock delay, and unresolved finding counts: Not verifiable as of October 10, 2026 (Dune MCP unavailable; no on-chain event query executed).

Cantina public competition report covering Morpho Blue and related periphery.

Morpho Blue core audit.

Morpho Blue core audit.

Scope and identity. The search results identify the relevant protocol as Morpho, the Paris-based Ethereum/EVM lending project founded in 2021—not a clearly separate entity named “Morpho Onchain.” Contract-address and chain matching could not be performed because on-chain verification was unavailable. Not verifiable as of October 10, 2026 whether the requested slug maps exactly to the Morpho contracts described below. Founders and team. Publicly identified founders include Paul Frambot (co-founder and CEO), Merlin Egalite, Julien Thomas, and—according to one independent profile—Mathis Gontier Delaunay. The sources are inconsistent on the exact founding group: some list Frambot, Thomas, and Egalite; others state four founders. This discrepancy is unresolved.

Frambot and other founders are described as engineering students from Télécom Paris, with the project originating in France in 2021. Public versus anonymous. The principal leadership is publicly named, rather than anonymous. Independent coverage describes Morpho Labs as the development company and Morpho Association as a French nonprofit structure; a 2026 report says Morpho Labs became a subsidiary of the association in 2025. The precise current legal ownership and governance arrangements were not independently verified through registry records. Not verifiable as of October 10, 2026. Prior projects, outcomes, and hacks. No reliable evidence in the retrieved results establishes material prior founder projects or founder-linked hacks.

Morpho’s security history is described inconsistently: an independent technical review reports numerous audits and historical issues that were fixed, while a suspicious Morpho-lookalike domain claims a 2025 front-end approval incident involving $2.6 million that was intercepted and returned. The latter is not treated as authoritative evidence because the domain is not confirmed as Morpho’s official site. Morpho’s actual incident history is therefore Not verifiable as of October 10, 2026. Credibility and real-world footprint. The publicly identified team, Paris presence, institutional partnerships reported by independent sources, and named external security firms support a real operating organization rather than a purely web-front project.

The cited address is 24 rue de Clichy, Paris, but physical occupancy and an onshore/offshore structure were not independently confirmed. Not verifiable as of October 10, 2026. Overall assessment: identifiable and apparently credible founders, but unresolved entity/contract mapping and incomplete independent verification of legal, office, and incident details.

Morpho has a generally strong reputation in DeFi as an infrastructure-focused, non-custodial lending protocol with broad institutional adoption and a large audit footprint. Multiple sources describe it as immutable or governance-minimized, and its backers are widely reported to include top-tier crypto investors such as a16z crypto, Paradigm, and Ribbit. On security and auditors, Morpho claims 25+ to 30+ audits and cites firms including Trail of Bits, Spearbit, and OpenZeppelin; independent coverage also repeats the “many audits” narrative.

The main adverse security event in the results was an April 2025 frontend vulnerability/exploit attempt involving about $2.6 million, which was reportedly intercepted by a white hat before losses occurred; the reports say protocol funds were not lost. Sentiment is largely positive, especially around efficiency, trust, and institutional integrations such as Coinbase, Robinhood, and Ledger. However, there has been reputational criticism in September 2026 after an unauthorized AI-generated marketing post about curator economics and protocol revenue was deleted, prompting negative discussion about communication controls and token/business-model messaging.

On legal/regulatory issues, Morpho’s co-founder Paul Frambot drew pushback for a proposal to classify onchain vaults into regulatory categories, but I found no evidence in the results of enforcement action, sanctions, or insolvency allegations against Morpho itself. There are also no substantiated rug-pull or fraud allegations in the provided results. Unresolved concerns remain around smart-contract/oracle risk, frontend/operational risk, and the fact that some high-level claims (TVL, revenue, or audit counts) come mainly from protocol or secondary-market commentary rather than primary on-chain verification here.

Not verifiable as of 2026-10-10.

Scope warning: “Morpho Onchain” / slug morpho-oc could not be matched to a distinct Ethereum product, vault, or contract. The following is a qualified assessment of Morpho Blue/Morpho Vaults, not confirmation that it is the requested slug. On-chain verification via Dune was unavailable; therefore product-specific figures are Not verifiable as of October 10, 2026. Economic model: Users supply ERC-20 assets—typically stablecoins, ETH derivatives, or BTC derivatives—to isolated Morpho lending markets or curated vaults.

Borrowers post specified collateral and pay variable interest. Yield is primarily organic borrower interest; MORPHO/issuer incentives may provide a subsidized component and are separate, variable rewards. Position profile: Lending is generally market-neutral to the supplied asset, but not risk-free: users bear asset depeg, oracle, collateral-liquidation, smart-contract, curator, and borrower-credit/liquidity risks. The base protocol does not inherently require leverage, looping, restaking, or external protocol exposure.

Individual vaults can add adapters or allocate across markets, so external exposure is strategy-dependent. Collateral is market-specific and isolated rather than shared system-wide. Liquidity and exits: No fixed lock-up is inherent. Withdrawals depend on available liquidity.

Morpho Vault V2 supports optional gates and, when liquidity is insufficient, in-kind redemption: part is paid out and the remainder becomes a direct lending position in a selected market; a vault-specific redemption fee may apply. Fees/revenue: Exact fees for morpho-oc are Not verifiable as of October 10, 2026. Vault V2 permits performance fees capped at 50% of interest and management fees capped at 5% annually; fees are vault/configuration dependent. DefiLlama reports no protocol revenue for Morpho Blue, while underlying borrower interest and liquidation-related fees are tracked as market activity, not necessarily Morpho treasury revenue. TVL/APY: Dune TVL, product split, trend, and APY history: Not verifiable as of October 10, 2026.

DeFiLlama’s Morpho Blue snapshot reported approximately $9.6B total TVL, $4.35B on Ethereum, and 4.32% average supply APY; this is aggregator data and may not represent morpho-oc. Assessment: Sustainable yield is borrower-demand dependent and floating; incentive-driven APY should be treated as subsidized and potentially temporary.

## Reserves / Treasury — Morpho Onchain (Ethereum) Identity and scope: The identifier morpho-oc could not be independently matched to a distinct Ethereum deployment; available sources describe the broader Morpho ecosystem. Therefore, protocol-specific treasury attribution is Not verifiable as of October 10, 2026. Liquid reserves: Not verifiable as of October 10, 2026. Dune MCP was unavailable, so no raw on-chain balance, latest block, token composition, or chain allocation could be verified.

DeFiLlama—an analytics platform, not raw-chain evidence—reports a broader Morpho treasury of approximately $32.62 million, composed mainly of $32.62 million MORPHO, plus approximately $99.92 stablecoins, $74.76 major assets, and $1,421 other assets. This figure is not confirmed for morpho-oc and should not be treated as an on-chain verified reserve figure. Addresses / custody / control: Morpho documentation identifies the Ethereum governance multisig 0xcBa28b38103307Ec8dA98377ffF9816C164f9AFa as a 5-of-9 multisig. Governance controls MORPHO held in the governance treasury and can set the fee recipient; this does not establish that the address holds all treasury assets. Composition and policy: Official documentation states that governance owns/controls 35.4% of total MORPHO supply, while 6.3% is allocated to the Morpho Association and 5.8% is reserved for contributors.

These are token-allocation disclosures, not a complete reserve policy or proof of current balances. Liabilities: No independently verified protocol-level liability schedule or reserve attestation was located. Morpho describes its protocols as immutable and non-custodial; user lending obligations are embedded in individual markets/vaults rather than presented as centralized treasury liabilities. Exact liabilities remain Not verifiable as of October 10, 2026. > Contradiction / data gap: The ~$32.62m treasury value is an aggregator estimate for broader Morpho, while the requested Dune-based, morpho-oc-specific reserve balance could not be verified.

Morpho Onchain (Ethereum) has a native token: MORPHO. The current Ethereum contract is 0x58D97B57BB95320F9a05dC918Aef65434969c2B2; legacy MORPHO is 0x9994E35Db50125E0DF82e4c2dde62496CE330999. Maximum/total supply is 1.0bn MORPHO. Supply and valuation: Analytics sources conflict materially: CoinGecko reports approximately 700.37m circulating, $1.68bn market cap, and $2.39bn FDV; CoinMarketCap reports approximately 532.68m circulating, $1.27bn market cap, and $2.38bn FDV.

The discrepancy is a material data-quality issue; no Dune/raw on-chain reconciliation is available in this run. > Contradiction: Morpho’s documentation originally expected roughly 11.2% circulating at transferability, while current aggregators imply 53–70% circulating. The actual circulating amount and the portion released through each allocation are Not verifiable as of October 10, 2026 without an on-chain supply/vesting reconciliation. Utility/governance: MORPHO provides voting and delegation power. Governance controls treasury tokens, token-contract ownership, LLTV/IRM whitelisting, fee settings, and protocol licensing.

Governance is executed through a 5/9 multisig after token-holder approval. The Morpho Blue fee switch can be set up to 25% of borrower interest, with a designated recipient; this is protocol revenue, not an automatic MORPHO-holder dividend. Token economics: Documented allocations are: governance 35.4%, strategic partners 27.5%, founders 15.2%, Morpho Association 6.3%, contributor reserve 5.8%, early contributors 4.9%, and users/launch pools 4.9%. Strategic-partner, founder, and contributor vesting schedules are described in the documentation.

Whether announced unlocks actually occurred on-chain is Not verifiable as of October 10, 2026. No documented buyback or holder revenue-share mechanism was identified. Users can burn their own MORPHO; the new token has no role-based permissions, but it is upgradeable and governance owns the upgradeable contract.

No blacklist or transfer-tax function is documented. Concentration/liquidity: Top-holder concentration, insider-wallet attribution, and Ethereum DEX liquidity depth are Not verifiable as of October 10, 2026. Binance is reported as the most active listing; an Ethereum Uniswap V4 MORPHO/ETH pool is reported, but its quoted ~$5.2k TVL is not sufficient for a reliable market-depth assessment.

A Bitcoin move below $10,000 would be an extreme tail event for Morpho on Ethereum, but the exact protocol impact is not verifiable as of 2026-10-10 because no on-chain exposure snapshot or borrower-level collateral composition is available in the provided materials. What can be said from Morpho’s own docs is that liquidations are driven by the oracle price, a position becomes liquidatable when its LTV exceeds the market’s LLTV, and there is no price floor once a position is underwater. For a BTC crash of this magnitude, the primary risk channel on Morpho would be loan collateral liquidation wherever BTC-linked collateral or BTC-price-sensitive collateral is used; Morpho’s model also explicitly uses instant price shocks for risk simulation, including a 40% shock for volatile assets in MetaMorpho risk modeling, which indicates the protocol designs around abrupt downside, though that is not a direct estimate for BTC at $10k.

Because the user asked for a stress scenario, the relevant conclusion is that such a drawdown would likely cause broad liquidation pressure on BTC-backed positions and any correlated DeFi collateral, with losses depending on LLTV, oracle timing, and liquidation capacity. One concrete Morpho example in the search results shows a cbBTC market with a liquidation record on Ethereum, confirming that BTC-linked collateral exists on Morpho, but it does not provide aggregate exposure and therefore cannot support a portfolio-wide loss estimate. If you need an institutional stress memo, the next required input is a current Ethereum-only exposure cut of BTC/cbBTC/WBTC collateral and borrower LTV distribution; without that, the severity can only be classified qualitatively as highly severe / potentially disruptive rather than quantified.

Not verifiable as of 2026-10-10: total BTC-linked exposure on Morpho Ethereum, expected liquidation volume, bad debt, and reserve-impact under BTC < $10,000.

For Morpho on Ethereum, a 20% depeg in the largest collateral would most likely trigger liquidations only in the specific markets using that collateral, because Morpho positions are market-isolated and become liquidatable when LTV reaches the market’s LLTV. A 20% collateral depeg is therefore a *market-by-market insolvency and liquidation stress test*, not a protocol-wide cross-margin event. The key risk question is whether the depegged collateral was already close to its LLTV.

If the market’s starting collateral ratio was above the LLTV but within 20% of it, the depeg would push positions into liquidation; if the starting margin was larger, positions would remain healthy. In stress cases, Morpho’s own governance forum notes that losses can grow rapidly at 20% depeg levels for some vault structures, with risk increasing as market size rises. What cannot be verified from the provided sources is the largest Ethereum collateral, the exact market exposure, and the resulting bad debt / liquidation amount for this specific protocol instance. Not verifiable as of 2026-10-10.

The most relevant operational implication is that curators can respond by revoking pending increases and setting caps to zero for affected collateral or markets, which Morpho documents as an instant emergency action.

Scope limitation. “Morpho Onchain / morpho-oc” does not identify a specific Ethereum contract, vault, market, or borrower address. Therefore, the top counterparty and exposure amount are: Not verifiable as of October 10, 2026. The following is the contract-level stress path for Morpho Blue exposure. Scenario: largest borrower becomes insolvent 1. Initial loss path — liquidatable position. If the borrower breaches the market’s LLTV, any external liquidator can repay debt and seize collateral plus the liquidation incentive.

If collateral sale proceeds cover debt, suppliers suffer no principal loss; the liquidator receives the economic compensation. 2. Bad-debt path — collateral insufficient. If all collateral is seized but debt remains, Morpho realizes bad debt. In the core contract, the remaining borrow shares and corresponding badDebtAssets are removed; totalSupplyAssets is reduced by the bad-debt amount.

This is the direct loss-recognition event. 3. Who absorbs it. The loss is absorbed pro rata by suppliers in that isolated Morpho market, through a lower value of their supply position. It is not automatically mutualized across unrelated Morpho markets, nor is there evidence here of a protocol-wide insurance/backstop obligation.

Morpho identifies market-specific oracle, collateral, and asset counterparty risks. 4. Vault transmission. If the market is accessed through a Morpho vault, the vault is economically just another market supplier. The loss passes through its adapter/underlying position valuation and is borne by vault depositors according to the vault’s allocation.

In-kind withdrawal may preserve access to remaining underlying liquidity, but it does not compensate a realized principal loss. Compensation: liquidation bonus to the liquidator; no guaranteed compensation to lenders. A curator, lender, or other party may voluntarily inject loan assets to cover realized bad debt, but this is discretionary rather than an identified protocol liability. Key contagion channel: shared market exposure, shared collateral/oracle failure, or a vault allocating to the affected market—not automatic contagion across all Ethereum Morpho markets.

For Morpho on Ethereum, a committed fraud by the DAO or owners scenario is best treated as low-probability but high-impact governance/control failure, not as a confirmed historical event. I found no source saying the Morpho DAO or owners have committed fraud, and Blockworks’ transparency filing states that no exploits affecting MORPHO tokenholders or protocol-treasury funds had occurred at the protocol layer or core DAO/Association treasuries as of 17.6.2026. The strongest relevant risk evidence is structural rather than evidentiary: an adversarial due-diligence report describes governance concentration, a curator accountability vacuum, and the possibility that a compromised owner multisig could delegate harmful permissions to a malicious curator.

Morpho’s own materials also acknowledge that users can lose assets through incorrect addresses, fake contracts, and smart-contract risk, but those are generic risk disclosures rather than proof of fraud by insiders. For a stress scenario, the plausible fraud pathways would be:

• Governance capture or collusion: insiders controlling voting or multisig rights could pass malicious parameter changes, fee extraction, or unsafe delegate permissions.
• Misappropriation via protocol control: if owner/governance keys were abused, user losses could arise without an obvious “hack” signature.
• Disclosure/representation fraud: false statements about control, safety, or treasury status could mislead users, but that is not evidenced in the supplied sources. Assessment: on the supplied evidence, actual committed fraud is not verifiable; the more defensible finding is credible governance abuse risk with meaningful tail risk if control keys or voting power were compromised.

Morpho’s yield on Ethereum is not directly verifiable from the provided search results, so the *primary yield source negative 30d* stress outcome is Not verifiable as of 2026-10-10. The available sources do confirm that Morpho’s vaults earn yield from borrower interest in underlying variable-rate markets, and that onchain interest accrual is the core yield mechanism for Morpho Vault V1. However, no source here provides an Ethereum-specific 30-day decomposition showing whether the primary yield source turned negative, nor any raw onchain measure to test that condition.

The closest relevant indicator is that Morpho’s own docs and third-party coverage describe yields as variable and dependent on market rates and utilization, which means a negative 30-day yield source is plausible under stress but still unverified from this dataset.

Scope: Ethereum Morpho protocol / Morpho Association; on-chain voting-concentration and top-holder analysis was requested via Dune, but Dune was unavailable in this run: Not verifiable as of October 10, 2026. Control map. Morpho’s immutable core contracts do not appear upgradeable. MORPHO-token governance controls the treasury, upgradeable MORPHO token contract, fee switch (maximum 25% of borrower interest), fee recipient, approved LLTVs/IRMs, certain ENS records, and governance multisig membership. Proposals are discussed on the forum, voted on through Snapshot, and require at least 500,000 MORPHO/delegated voting power to submit; approved actions are executed by the governance Safe. DAO substance. This is a real but limited DAO: token holders set defined parameters and authorize treasury actions, while execution is delegated to a multisig.

It is not fully on-chain execution, and voting concentration/top holders are Not verifiable as of October 10, 2026. The core lending contracts are materially more governance-minimized than the vault layer; individual vault owners/curators retain vault-specific administrative powers. Multisig contradiction. Morpho’s current documentation still states a 5/9 Ethereum governance Safe at 0xcBa28b38103307Ec8dA98377ffF9816C164f9AFa, while MIP-133 reports an approved move to 6/10 by adding a Spearbit signer; the forum says implementation and address verification were still being coordinated. Therefore the live threshold, complete owner list, signer independence, and final execution status are Not verifiable as of October 10, 2026. Timelock/emergency powers. No current, protocol-wide DAO timelock was verifiable.

A historical Morpho Admin design used a 24-hour delay for certain legacy optimizer actions, but that does not establish a current Ethereum-wide governance timelock. User assets in immutable core markets cannot be directly drained by the Association or DAO Safe; treasury assets can be transferred after governance authorization. Vault-specific roles and timelocks are separate risks. Company/entity/frontend. The frontend, documentation, and related interfaces are operated by Morpho Association, a French declared association: 24 rue de Clichy, Paris; RNA W751263773; SIREN 911 156 933; EU VAT FR44911156933.

Directors are Not verifiable as of October 10, 2026. Its Terms state French law and Paris courts, and disclaim control/custody of protocol assets.

Scope/name-collision check: The reviewed sources identify this as the Morpho DeFi lending protocol and its Ethereum-facing Morpho interfaces, not the unrelated “Morpho” biometric/software companies. On-chain verification is unavailable: Not verifiable as of October 10, 2026. Entity/jurisdiction. The identifiable legal entity is Morpho Association, a French software-development association registered at 24 rue de Clichy, 75009 Paris (SIREN 911 156 933; RNA W751263773). Its terms select French law; Paris courts are specified for qualifying EU consumer disputes.

The Association describes itself as steward/interface provider, not the operator or controller of the immutable permissionless protocols, DAO, or user transactions. ToS/restrictions. The current terms exclude restricted territories and prohibit VPN circumvention. Users must comply with applicable law and represent that they are not sanctioned persons or located in sanctioned territories. The Association disclaims custody, control, guarantees, and responsibility for protocol/blockchain operation.

These restrictions bind the Association’s sites/apps, not necessarily every independent interface or direct smart-contract interaction. KYC/AML and sanctions. No conventional customer-onboarding KYC/AML obligation for direct protocol use was identified. The web interface may collect wallet data and screen wallets for illicit activity using blockchain-analytics providers; this is interface-level compliance, not proof that the permissionless protocol itself performs KYC/AML. Compliance blocking of sanctioned wallets does not mean Morpho is sanctioned. Classification. Morpho’s current terms assert that the Association is not a financial/credit/investment institution, is not supervised under MiCA, and that the protocol is decentralized software rather than a regulated financial service.

The terms separately characterize MORPHO as a MiCA Article 3 governance utility token. These are unverified legal-position claims, not regulator determinations. Enforcement, litigation, sanctions. I found no identified regulator enforcement action or sanctions designation against Morpho Association itself; the SEC material located was a meeting request, not enforcement. No protocol-specific court case was identified. Not verifiable as of October 10, 2026 for an exhaustive global search. Data protection. The Association claims GDPR/UK GDPR/U.S.-state privacy-law compliance, acts as controller for limited site/app data, and warns that public blockchain data is immutable and outside its control. Legal structure vs. actual risk. The French association wrapper does not eliminate regulatory or liability exposure: risk may attach to interfaces, curators, vault managers, token activities, geographic users, or future claims that functional control exists despite decentralization.

Independent interfaces and vault actors require separate legal diligence.

No exact GLEIF LEI record for 'Morpho Association', 'Morpho Onchain'. OFAC SDN screening of 'Morpho Association', 'Morpho Onchain': no match. SEC litigation and administrative release feeds: no mention.

Morpho Onchain does not appear to issue its own stablecoin; it is a lending network that uses third-party stablecoins such as USDC, USDT, and USDG in integrations and vaults. Based on the gathered web evidence, no stablecoin depeg event for a Morpho-issued stablecoin can be confirmed because no Morpho-issued stablecoin was identified. The requested depeg metrics are therefore not verifiable as of 2026-10-10.

Morpho’s Ethereum risk profile is driven primarily by isolated-market configuration, oracle quality, liquidation liquidity, and—where vaults are used—third-party curator and adapter decisions. Core contracts benefit from audits, formal verification, immutability, timelocks, and a bug bounty, but deployment-specific configuration, exposure, and current on-chain balances were not verifiable without Dune as of October 10, 2026.

Morpho Onchain’s top five strengths are: immutable, non-custodial architecture; permissionless market creation; capital efficiency through direct matching with fallback liquidity; risk isolation via isolated markets; and institutional-grade flexibility for custom loan terms and integrations.

• Non-custodial and immutable: Morpho positions its protocol as non-custodial, immutable, and auditable, with no admin keys or upgrades, which reduces counterparty and governance risk for users and integrators.
• Permissionless and customizable: Anyone can create markets, and the protocol is designed as open infrastructure that builders can use to deploy bespoke lending products.
• Better capital efficiency: Morpho’s matching engine connects lenders and borrowers directly when possible, while unmatched liquidity routes to a base market, aiming to improve rates without sacrificing continuous liquidity.
• Risk isolation: Isolated markets mean risks are compartmentalized, so issues in one market do not automatically contaminate others.
• Institutional flexibility: Morpho supports tailored/permissioned markets and broader loan structures, making it suitable for institutional lending, compliance needs, and custom credit products. The main caveat is that several sources are Morpho-owned or marketing-adjacent, so these are best read as *protocol-positioned strengths* rather than independently verified risk metrics.