Skip to content

SYSTEM ONLINE

LIVE TAPE
BTC$84,409.00▲ 0.2%·
ETH$2,686.05▼ 0.2%·
USDT$0.999777▼ 0.0%·
BNB$778.05▲ 0.8%·
XRP$1.52▼ 0.4%·
USDC$0.999841▼ 0.0%·
SOL$121.78▲ 0.7%·
TRX$0.33329▼ 0.2%·
ZEC$1,578.25▼ 3.9%·
FIGR_HELOC$1.06▼ 0.4%·
HYPE$91.40▼ 1.0%·
DOGE$0.096699▲ 0.4%·
LINK$13.97▼ 0.9%·
XMR$550.39▼ 1.4%·
WBT$84.18▲ 0.1%·
USDS$0.999682▼ 0.0%·
ADA$0.254687▲ 0.9%·
RAIN$0.012697▼ 1.4%·
BTC$84,409.00▲ 0.2%·
ETH$2,686.05▼ 0.2%·
USDT$0.999777▼ 0.0%·
BNB$778.05▲ 0.8%·
XRP$1.52▼ 0.4%·
USDC$0.999841▼ 0.0%·
SOL$121.78▲ 0.7%·
TRX$0.33329▼ 0.2%·
ZEC$1,578.25▼ 3.9%·
FIGR_HELOC$1.06▼ 0.4%·
HYPE$91.40▼ 1.0%·
DOGE$0.096699▲ 0.4%·
LINK$13.97▼ 0.9%·
XMR$550.39▼ 1.4%·
WBT$84.18▲ 0.1%·
USDS$0.999682▼ 0.0%·
ADA$0.254687▲ 0.9%·
RAIN$0.012697▼ 1.4%·

Lending protocol

Morpho

Francemorpho.org ↗MORPHO market data →

Also known as Morpho Blue, Morpho Protocol, Morpho Labs, Morpho Association, MORPHO, Morpho Vaults, Morpho Midnight, MetaMorpho

morpho crypto

Morpho is an Ethereum-born lending protocol where every market is isolated: one loan asset, one collateral asset, one oracle and a fixed liquidation threshold. Most depositors use vaults, run by third-party curators who choose which markets to lend into. Deposits passed $14 billion in August 2026, and the Paris-based Morpho Association supports its development.

Our read

Morpho's core contracts are small, immutable and heavily verified, and isolation means one broken collateral cannot drain every market. It suits depositors who pick a vault as carefully as they would pick a fund manager, because the curator's choices are where the risk sits. In November 2025 and March 2026 depositors lost money in markets that were working exactly as coded but had accepted collateral that failed. Before depositing, check who curates the vault and which markets it lends into.

01

Key facts

Deposits
Crossed $14 billion in August 2026, about 25% of the crypto-backed lending market by Morpho's estimate
Sep 2026 · Morpho ↗
Total value locked
About $11.0 billion (TVL excludes borrowed funds)
Sep 2026 · DefiLlama ↗
Funding
$175M round for the Morpho Association, co-led by Paradigm, a16z crypto and Ribbit
Jun 2026 · Morpho ↗
Morpho Midnight
Fixed-rate, fixed-term lending protocol goes live with a new Markets App
Jul 2026 · Morpho ↗
Governance powers
Core contracts immutable; governance can turn on a fee switch capped at 25% of borrower interest and whitelist LLTVs and rate models
Sep 2026 · Morpho docs ↗
Legal entity
Morpho Association, a French association registered in Paris (SIREN 911 156 933)
Sep 2026 · Morpho ↗
02

How Morpho lending works: isolated markets and Midnight

A Morpho market (originally called Morpho Blue) is defined by five fixed choices: the loan asset, the collateral asset, the price oracle, the liquidation loan-to-value (LLTV) and the interest-rate model. Anyone can create a market, but only with LLTVs and rate models that governance has whitelisted. Once created, a market's settings never change, and its losses stay inside it (Morpho docs).

Pooled lender (e.g. Aave V3)Morpho market
Collateral per marketMany assets share one poolOne collateral, one loan asset
ParametersChanged by governance over timeFixed at creation
Bad debtCan spread across the poolStays in that market
Who picks the riskThe DAO and its risk managersMarket creators and vault curators

The core contracts are immutable. Morpho's security page lists formal verification with Certora, mutation testing and a $2.5M bug bounty on Cantina (Morpho docs). Governance cannot touch deposits. Its powers are limited to the MORPHO treasury, the upgradeable MORPHO token contract, whitelisting, and a fee switch capped at 25% of borrower interest. A 5-of-9 multisig executes approved votes.

Morpho Midnight, live since 21 July 2026, adds fixed-rate, fixed-term loans with early exit through limit orders on a secondary market (Morpho). Coinbase launched fixed-rate crypto-backed loans on top of it. The Morpho card scores the variable-rate lending product.

03

Morpho vaults and who curates them

Most people never pick a market themselves. They deposit into a vault, which spreads deposits across several markets. Each vault has a curator, an outside firm such as Steakhouse Financial, Gauntlet or Re7, that decides which markets the vault may lend into and how much each can take. A Public Allocator can move liquidity between a vault's approved markets on demand.

That puts vault risk with the curator, and 2025–26 showed how much the choice matters:

  • November 2025: when xUSD, deUSD and USDX lost their pegs, vaults from several curators that lent against them took bad debt. Vaults limited to blue-chip collateral, such as Steakhouse's, reported no losses.
  • 22 March 2026: after Resolv's USR stablecoin was exploited, curator vaults routed about $6.2M of USDC into markets that still priced USR through a hardcoded oracle, 96% of it from Gauntlet vaults. The Public Allocator helped move that liquidity in (Rekt). The exploit's direct hit inside Morpho had been about $4,900.
  • May 2025: a manipulated LP-token oracle on a Base market created $49,303 of bad debt, which the curator, Clearstar, covered within hours (Morpho forum).

Morpho's contracts behaved as designed in each case. The failures were in collateral choices and oracles set by other people. Our risk-manager ledger tracks the main curators' records.

04

Who runs the Morpho protocol

The Morpho Association is a French non-profit association registered in Paris (SIREN 911 156 933), and it is the contracting party in Morpho's terms of use (Terms). Paul Frambot, co-founder and CEO, still writes Morpho's product announcements. The Association raised $175M in June 2026 in a round co-led by Paradigm, a16z crypto and Ribbit, with Apollo Funds, Circle Ventures, VanEck and others joining (Morpho).

MORPHO has a maximum supply of 1 billion. As of November 2024, 35.4% was held by Morpho governance. The original token was an immutable contract with no on-chain vote tracking, so governance wrapped it in an upgradeable version under MIP-75, and only wrapped MORPHO is transferable (Morpho docs). Token data is on our market page.

Morpho powers products for large platforms. The Association names Coinbase, Kraken and Binance among exchanges using it, Bitwise, Galaxy and Anchorage among institutions, and Ledger among consumer brands. Robinhood chose it to power a new earn product. For most of those users, Morpho is infrastructure they never see.

05

Morpho news, 2025–2026

DateEvent
May 2025Aerodrome LP-oracle attack on a Base market; curator covers $49K
Nov 2025xUSD, deUSD and USDX depegs leave bad debt in some curators' vaults
Dec 2025Sentora joins as a vault curator
22 Mar 2026Resolv USR exploit; about $6.2M of bad debt in Morpho markets
9 Jun 2026Morpho Association raises $175M
21 Jul 2026Morpho Midnight (fixed-rate, fixed-term) goes live
Aug 2026Deposits cross $14B
24 Sep 2026Paul Frambot sets out 'the next phase of vaults': standards for institutions and regulators
06

Incident log

4 entries · $6.5M lost in total · repaid, confirmed: 1 of 4 where user funds were at stake

  1. Depeg$6.2M

    Resolv USR exploit spreads into Morpho markets

    Resolv's USR was minted without backing after a leaked key. Markets that still valued USR through a hardcoded oracle kept lending, and curator vaults routed about $6.2M of USDC into them, 96% from Gauntlet vaults.

    Partly repaidOn 3 June 2026 Gauntlet announced that 4,379,827 USDC of recovery proceeds from Resolv was claimable by depositors in its five affected vaults.

    Rekt ↗Gauntlet ↗

  2. Depeg

    xUSD and deUSD depegs leave bad debt in curated vaults

    After the Stream Finance collapse, markets lending against xUSD, deUSD and sdeUSD took bad debt, hitting vaults of curators including Re7. Secondary reports give per-curator figures that we could not confirm from primary sources.

    Repayment unknownCurators handled losses vault by vault; we found no consolidated primary account of what depositors recovered.

    Re7 Labs ↗

  3. Exploit$49K

    Aerodrome cUSDO/USDC LP oracle manipulation on Base

    An attacker used flash loans to move the reserves of an Aerodrome pool and so the LP-token oracle, over- then under-collateralising a position and leaving $49,303 of bad debt in one market. The oracle design, not Morpho's contracts, was at fault.

    Repaid — confirmedThe curator covered the full shortfall within hours; the post-mortem cites the on-chain transaction.

    Morpho Forum ↗

  4. Exploit$250K

    Oracle misconfiguration in a curated PAXG/USDC market

    A PAXG/USDC market curated by LeadBlock had a misconfigured oracle, and an attacker took about $230–250K from it.

    Repayment unknownRecorded by DefiLlama; we found no primary account of reimbursement.

    DefiLlama ↗

07

In our ratings

This page is the record. The scores sit on the review cards, next to the evidence and the weights they came from.

08

Compare Morpho with

Frequently asked questions

Is Morpho Blue the same as Morpho?+

Morpho Blue was the original name of its isolated-market protocol; Morpho's docs now call these variable-rate markets 'Blue' alongside the newer fixed-rate 'Midnight'. Both sit under the Morpho brand.

Can Morpho governance take my deposit?+

No. The core contracts are immutable. Governance controls the treasury, the MORPHO token contract, whitelists and a fee switch capped at 25% of interest, not user funds.

Who decides where a Morpho vault lends?+

The vault's curator, an outside firm named on the vault. Curator quality is the main difference between a safe vault and a risky one.

Where is Morpho based?+

The Morpho Association is a French association registered in Paris. It raised $175M in June 2026.

What is Morpho Midnight?+

A fixed-rate, fixed-term lending protocol launched on 21 July 2026, with a secondary market that lets lenders exit early. Coinbase uses it for fixed-rate crypto-backed loans.

10

What changed

  1. Profile published.

Compiled by

Olivia Bennett

By Olivia Bennett

Blockchain Security Researcher · September 27, 2026

We have no commercial relationship with Morpho and earn nothing from any link on this page. Every fact above carries the date it was true and a link to where it comes from; if one is out of date, the contact page reaches the editor who keeps this file.