Skip to content

Audits - Security Reviews

Morpho is known for its industry-leading security practices and follows a multi-faceted approach to security.

Morpho security practices include formal verification, mutation tests, fuzzing, unit testing, and peer reviews that can be found within respective Github repositories. External measures include professional security reviews, contests, and pre/post-deployment bounties.

A whole article was dedicated to the Morpho Security Framework.

The Morpho apps and smart contracts have been audited extensively by a wide range of security firms, with every new app and feature undergoing audits before release. The full list of audits is available below.

AuditorsScopeDateReport
SpearbitVaults V2 - Adapters2025-09-11spearbit-report
SpearbitVaults V22025-11-08spearbit-report
ChainSecurityVaults V22025-09-15chainsecurity-report
BlackthornVaults V22025-09-15blackthorn-report
Cantina ContestVaults V22025-07-15chainsecurity-report
ZellicVaults V22025-07-15zellic-report
SpearbitVaults V22025-05-19spearbit-report
SpearbitMorpho V1 - Morpho Periphery2024-10-29spearbit-report
ABDK ConsultingMorpho V1 - Morpho Periphery2024-11-01ABDK-report
SpearbitMorpho V1 - Morpho Periphery2024-11-23cantina-managed-review
Open ZeppelinMorpho V1 - Morpho Periphery2024-11-16MetaMorpho Diff Audit
SpearbitMorpho V1 - Public Allocator2024-03-11cantina-managed-review
Cantina ContestMorpho V12023-11 to 2023-12cantina-competition
SpearbitMorpho V12023-10-16cantina-managed-review
Open ZeppelinMorpho V12023-10-13open-zeppelin
Cantina ContestMorpho V1 - Morpho Periphery2023-11 to 2023-12cantina-competition
SpearbitMorpho V1 - Morpho Periphery2023-11-16cantina-managed-review
Open ZeppelinMorpho V1 - Morpho Periphery2023-11-16open-zeppelin
SpearbitMorpho V0 (AaveV3)2023-06-19spearbit-report
SpearbitMorpho V0 (AaveV3)2023-05-04spearbit-report
Runtime VerificationMorpho V0 (AaveV3)2023-05-02runtime-verification-report
SpearbitMorpho V02023-03-01spearbit-report
PessimisticMorpho V02023-02-20pessimistic-report
SpearbitMorpho V0 [Draft]2022-12-06spearbit-draft-report
PessimisticMorpho V02022-10-06pessimistic-report
OmnisciaMorpho V02022-08-25omniscia-report
SpearbitMorpho V0 (AaveV2)2022-08-24spearbit-report
ChainsecurityMorpho V0 (AaveV3) [Non Ethereum]2022-08-19chainsecurity-report
OmnisciaMorpho Datastructures2022-08-17omniscia-report
PessimisticMorpho V0 (AaveV2)2022-07-25pessimistic-report
Trail of BitsMorpho V0 (CompoundV2)2022-07-21trail-of-bits-report
OmnisciaMORPHO Token2022-06-15omniscia-report
Trail of BitsMorpho V0 (CompoundV2)2022-06-03trail-of-bits-report
SpearbitMorpho V0 (AaveV2)2022-09-05spearbit-report
Pessimistic[Beta] Morpho V0 (CompoundV2)2022-04-25pessimistic-report
Pessimistic[Beta] Morpho V0 (AaveV2)2022-03-08pessimistic-report
Pessimistic[Beta] Morpho V0 (AaveV2)2022-02-16pessimistic-report
Pessimistic[Alpha] Morpho V0 (AaveV2)2022-01-11pessimistic-report
Solidified[Alpha] Morpho V0 (CompoundV2)2021-11-04solidified-report
LexfoMorpho-related DNS's & Morpho-related Github's2023-05-10Lexfo_250523.pdf
Securing[Beta] Morpho Association dApp2022-04-04MorphoDAO_Frontend_04042022.pdf