
Lending protocol
Morpho
Francemorpho.org ↗MORPHO market data →
Also known as Morpho Blue, Morpho Protocol, Morpho Labs, Morpho Association, MORPHO, Morpho Vaults, Morpho Midnight, MetaMorpho
morpho crypto
Morpho is an Ethereum-born lending protocol where every market is isolated: one loan asset, one collateral asset, one oracle and a fixed liquidation threshold. Most depositors use vaults, run by third-party curators who choose which markets to lend into. Deposits passed $14 billion in August 2026, and the Paris-based Morpho Association supports its development.
Our read
Morpho's core contracts are small, immutable and heavily verified, and isolation means one broken collateral cannot drain every market. It suits depositors who pick a vault as carefully as they would pick a fund manager, because the curator's choices are where the risk sits. In November 2025 and March 2026 depositors lost money in markets that were working exactly as coded but had accepted collateral that failed. Before depositing, check who curates the vault and which markets it lends into.
Key facts
- Deposits
- Crossed $14 billion in August 2026, about 25% of the crypto-backed lending market by Morpho's estimate
- Sep 2026 · Morpho ↗
- Funding
- $175M round for the Morpho Association, co-led by Paradigm, a16z crypto and Ribbit
- Jun 2026 · Morpho ↗
- Morpho Midnight
- Fixed-rate, fixed-term lending protocol goes live with a new Markets App
- Jul 2026 · Morpho ↗
- Governance powers
- Core contracts immutable; governance can turn on a fee switch capped at 25% of borrower interest and whitelist LLTVs and rate models
- Sep 2026 · Morpho docs ↗
- Legal entity
- Morpho Association, a French association registered in Paris (SIREN 911 156 933)
- Sep 2026 · Morpho ↗
How Morpho lending works: isolated markets and Midnight
A Morpho market (originally called Morpho Blue) is defined by five fixed choices: the loan asset, the collateral asset, the price oracle, the liquidation loan-to-value (LLTV) and the interest-rate model. Anyone can create a market, but only with LLTVs and rate models that governance has whitelisted. Once created, a market's settings never change, and its losses stay inside it (Morpho docs).
| Pooled lender (e.g. Aave V3) | Morpho market | |
|---|---|---|
| Collateral per market | Many assets share one pool | One collateral, one loan asset |
| Parameters | Changed by governance over time | Fixed at creation |
| Bad debt | Can spread across the pool | Stays in that market |
| Who picks the risk | The DAO and its risk managers | Market creators and vault curators |
The core contracts are immutable. Morpho's security page lists formal verification with Certora, mutation testing and a $2.5M bug bounty on Cantina (Morpho docs). Governance cannot touch deposits. Its powers are limited to the MORPHO treasury, the upgradeable MORPHO token contract, whitelisting, and a fee switch capped at 25% of borrower interest. A 5-of-9 multisig executes approved votes.
Morpho Midnight, live since 21 July 2026, adds fixed-rate, fixed-term loans with early exit through limit orders on a secondary market (Morpho). Coinbase launched fixed-rate crypto-backed loans on top of it. The Morpho card scores the variable-rate lending product.
Morpho vaults and who curates them
Most people never pick a market themselves. They deposit into a vault, which spreads deposits across several markets. Each vault has a curator, an outside firm such as Steakhouse Financial, Gauntlet or Re7, that decides which markets the vault may lend into and how much each can take. A Public Allocator can move liquidity between a vault's approved markets on demand.
That puts vault risk with the curator, and 2025–26 showed how much the choice matters:
- November 2025: when xUSD, deUSD and USDX lost their pegs, vaults from several curators that lent against them took bad debt. Vaults limited to blue-chip collateral, such as Steakhouse's, reported no losses.
- 22 March 2026: after Resolv's USR stablecoin was exploited, curator vaults routed about $6.2M of USDC into markets that still priced USR through a hardcoded oracle, 96% of it from Gauntlet vaults. The Public Allocator helped move that liquidity in (Rekt). The exploit's direct hit inside Morpho had been about $4,900.
- May 2025: a manipulated LP-token oracle on a Base market created $49,303 of bad debt, which the curator, Clearstar, covered within hours (Morpho forum).
Morpho's contracts behaved as designed in each case. The failures were in collateral choices and oracles set by other people. Our risk-manager ledger tracks the main curators' records.
Who runs the Morpho protocol
The Morpho Association is a French non-profit association registered in Paris (SIREN 911 156 933), and it is the contracting party in Morpho's terms of use (Terms). Paul Frambot, co-founder and CEO, still writes Morpho's product announcements. The Association raised $175M in June 2026 in a round co-led by Paradigm, a16z crypto and Ribbit, with Apollo Funds, Circle Ventures, VanEck and others joining (Morpho).
MORPHO has a maximum supply of 1 billion. As of November 2024, 35.4% was held by Morpho governance. The original token was an immutable contract with no on-chain vote tracking, so governance wrapped it in an upgradeable version under MIP-75, and only wrapped MORPHO is transferable (Morpho docs). Token data is on our market page.
Morpho powers products for large platforms. The Association names Coinbase, Kraken and Binance among exchanges using it, Bitwise, Galaxy and Anchorage among institutions, and Ledger among consumer brands. Robinhood chose it to power a new earn product. For most of those users, Morpho is infrastructure they never see.
Morpho news, 2025–2026
| Date | Event |
|---|---|
| May 2025 | Aerodrome LP-oracle attack on a Base market; curator covers $49K |
| Nov 2025 | xUSD, deUSD and USDX depegs leave bad debt in some curators' vaults |
| Dec 2025 | Sentora joins as a vault curator |
| 22 Mar 2026 | Resolv USR exploit; about $6.2M of bad debt in Morpho markets |
| 9 Jun 2026 | Morpho Association raises $175M |
| 21 Jul 2026 | Morpho Midnight (fixed-rate, fixed-term) goes live |
| Aug 2026 | Deposits cross $14B |
| 24 Sep 2026 | Paul Frambot sets out 'the next phase of vaults': standards for institutions and regulators |
Incident log
4 entries · $6.5M lost in total · repaid, confirmed: 1 of 4 where user funds were at stake
Depeg$6.2M
Resolv USR exploit spreads into Morpho markets
Resolv's USR was minted without backing after a leaked key. Markets that still valued USR through a hardcoded oracle kept lending, and curator vaults routed about $6.2M of USDC into them, 96% from Gauntlet vaults.
Partly repaidOn 3 June 2026 Gauntlet announced that 4,379,827 USDC of recovery proceeds from Resolv was claimable by depositors in its five affected vaults.Depeg
xUSD and deUSD depegs leave bad debt in curated vaults
After the Stream Finance collapse, markets lending against xUSD, deUSD and sdeUSD took bad debt, hitting vaults of curators including Re7. Secondary reports give per-curator figures that we could not confirm from primary sources.
Repayment unknownCurators handled losses vault by vault; we found no consolidated primary account of what depositors recovered.Exploit$49K
Aerodrome cUSDO/USDC LP oracle manipulation on Base
An attacker used flash loans to move the reserves of an Aerodrome pool and so the LP-token oracle, over- then under-collateralising a position and leaving $49,303 of bad debt in one market. The oracle design, not Morpho's contracts, was at fault.
Repaid — confirmedThe curator covered the full shortfall within hours; the post-mortem cites the on-chain transaction.Exploit$250K
Oracle misconfiguration in a curated PAXG/USDC market
A PAXG/USDC market curated by LeadBlock had a misconfigured oracle, and an attacker took about $230–250K from it.
Repayment unknownRecorded by DefiLlama; we found no primary account of reimbursement.
In our ratings
This page is the record. The scores sit on the review cards, next to the evidence and the weights they came from.
Compare Morpho with
AaveLending protocol · 2017Aave is the largest on-chain lending protocol, with about $19 billion locked. V4, live since March 2026, splits lending into hubs and spokes.
CompoundLending protocolCompound is the Ethereum lending protocol behind the COMP token and Compound III markets. It was left with $15.6M of bad deUSD collateral in late 2025.
Steakhouse FinancialDeFi risk manager · SwitzerlandSteakhouse Financial curates USDC lending vaults on Morpho, including the ones behind Coinbase's in-app USDC lending, and grew out of MakerDAO's RWA work.
GauntletDeFi risk manager · 2018 · United StatesGauntlet is a New York DeFi risk firm that sets Compound's lending parameters and curates yield vaults on Morpho, Kamino and Drift. Founded in 2018.
Frequently asked questions
Is Morpho Blue the same as Morpho?+
Morpho Blue was the original name of its isolated-market protocol; Morpho's docs now call these variable-rate markets 'Blue' alongside the newer fixed-rate 'Midnight'. Both sit under the Morpho brand.
Can Morpho governance take my deposit?+
No. The core contracts are immutable. Governance controls the treasury, the MORPHO token contract, whitelists and a fee switch capped at 25% of interest, not user funds.
Who decides where a Morpho vault lends?+
The vault's curator, an outside firm named on the vault. Curator quality is the main difference between a safe vault and a risky one.
Where is Morpho based?+
The Morpho Association is a French association registered in Paris. It raised $175M in June 2026.
What is Morpho Midnight?+
A fixed-rate, fixed-term lending protocol launched on 21 July 2026, with a secondary market that lets lenders exit early. Coinbase uses it for fixed-rate crypto-backed loans.
What changed
- Profile published.
Compiled by
Blockchain Security Researcher · September 27, 2026
We have no commercial relationship with Morpho and earn nothing from any link on this page. Every fact above carries the date it was true and a link to where it comes from; if one is out of date, the contact page reaches the editor who keeps this file.