Audits - Security Reviews
Morpho is known for its industry-leading security practices and follows a multi-faceted approach to security.
Morpho security practices include formal verification, mutation tests, fuzzing, unit testing, and peer reviews that can be found within respective Github repositories. External measures include professional security reviews, contests, and pre/post-deployment bounties.
A whole article was dedicated to the Morpho Security Framework.
The Morpho apps and smart contracts have been audited extensively by a wide range of security firms, with every new app and feature undergoing audits before release. The full list of audits is available below.
| Auditors | Scope | Date | Report |
|---|---|---|---|
| Spearbit | Vaults V2 - Adapters | 2025-09-11 | spearbit-report |
| Spearbit | Vaults V2 | 2025-11-08 | spearbit-report |
| ChainSecurity | Vaults V2 | 2025-09-15 | chainsecurity-report |
| Blackthorn | Vaults V2 | 2025-09-15 | blackthorn-report |
| Cantina Contest | Vaults V2 | 2025-07-15 | chainsecurity-report |
| Zellic | Vaults V2 | 2025-07-15 | zellic-report |
| Spearbit | Vaults V2 | 2025-05-19 | spearbit-report |
| Spearbit | Morpho V1 - Morpho Periphery | 2024-10-29 | spearbit-report |
| ABDK Consulting | Morpho V1 - Morpho Periphery | 2024-11-01 | ABDK-report |
| Spearbit | Morpho V1 - Morpho Periphery | 2024-11-23 | cantina-managed-review |
| Open Zeppelin | Morpho V1 - Morpho Periphery | 2024-11-16 | MetaMorpho Diff Audit |
| Spearbit | Morpho V1 - Public Allocator | 2024-03-11 | cantina-managed-review |
| Cantina Contest | Morpho V1 | 2023-11 to 2023-12 | cantina-competition |
| Spearbit | Morpho V1 | 2023-10-16 | cantina-managed-review |
| Open Zeppelin | Morpho V1 | 2023-10-13 | open-zeppelin |
| Cantina Contest | Morpho V1 - Morpho Periphery | 2023-11 to 2023-12 | cantina-competition |
| Spearbit | Morpho V1 - Morpho Periphery | 2023-11-16 | cantina-managed-review |
| Open Zeppelin | Morpho V1 - Morpho Periphery | 2023-11-16 | open-zeppelin |
| Spearbit | Morpho V0 (AaveV3) | 2023-06-19 | spearbit-report |
| Spearbit | Morpho V0 (AaveV3) | 2023-05-04 | spearbit-report |
| Runtime Verification | Morpho V0 (AaveV3) | 2023-05-02 | runtime-verification-report |
| Spearbit | Morpho V0 | 2023-03-01 | spearbit-report |
| Pessimistic | Morpho V0 | 2023-02-20 | pessimistic-report |
| Spearbit | Morpho V0 [Draft] | 2022-12-06 | spearbit-draft-report |
| Pessimistic | Morpho V0 | 2022-10-06 | pessimistic-report |
| Omniscia | Morpho V0 | 2022-08-25 | omniscia-report |
| Spearbit | Morpho V0 (AaveV2) | 2022-08-24 | spearbit-report |
| Chainsecurity | Morpho V0 (AaveV3) [Non Ethereum] | 2022-08-19 | chainsecurity-report |
| Omniscia | Morpho Datastructures | 2022-08-17 | omniscia-report |
| Pessimistic | Morpho V0 (AaveV2) | 2022-07-25 | pessimistic-report |
| Trail of Bits | Morpho V0 (CompoundV2) | 2022-07-21 | trail-of-bits-report |
| Omniscia | MORPHO Token | 2022-06-15 | omniscia-report |
| Trail of Bits | Morpho V0 (CompoundV2) | 2022-06-03 | trail-of-bits-report |
| Spearbit | Morpho V0 (AaveV2) | 2022-09-05 | spearbit-report |
| Pessimistic | [Beta] Morpho V0 (CompoundV2) | 2022-04-25 | pessimistic-report |
| Pessimistic | [Beta] Morpho V0 (AaveV2) | 2022-03-08 | pessimistic-report |
| Pessimistic | [Beta] Morpho V0 (AaveV2) | 2022-02-16 | pessimistic-report |
| Pessimistic | [Alpha] Morpho V0 (AaveV2) | 2022-01-11 | pessimistic-report |
| Solidified | [Alpha] Morpho V0 (CompoundV2) | 2021-11-04 | solidified-report |
| Lexfo | Morpho-related DNS's & Morpho-related Github's | 2023-05-10 | Lexfo_250523.pdf |
| Securing | [Beta] Morpho Association dApp | 2022-04-04 | MorphoDAO_Frontend_04042022.pdf |
