Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.

Morpho

Lending, Money Markets & CDPsmedium·risk 0.4300·TVL —·blast $0·active

website github twitter discord

Static profile (Identity / Contract / Dependency / Governance / Reputation)

Identity

Sector

Lending, Money Markets & CDPs

Subsector tags

consumer_app, infra_tooling, general_defiDemo

Chain deployments

—

Website

https://www.morpho.xyzDemo

Launch date

—

Immutable

noDemo

Permissionless

yesDemo

Contract

Primary address

—

Proxy pattern

UNKNOWN

Upgrade authority

UNKNOWN

Multisig threshold

—

Compiler

0.8.20

Uses assembly

yesDemo

Bug bounty

noneDemo

Contract addresses

0xdf495e0a9d0912f3ce3e7fca6df6d11385dc4275, 0x96f46f6af73e68ea75f5f08a79b9d56194ec0c34, 0x5483c77bc30ffe83e528521406440a059791a0f3Demo

Audits tier

2

Dependency

Oracle providers

Chainlink

Bridge dependencies

—

Stablecoin dependencies

DAI, USDC, USDT

LST / LRT deps

—Demo

DEX liquidity venues

uniswap_v4, velodrome, camelotDemo

CEX listings

—Demo

Custodian

—Demo

KMS provider

fireblocks_mpcDemo

RPC provider

self_hostedDemo

Frontend host

netlifyDemo

npm lockfile sha

sha256:fa2e7e4856e4958777658e0355e6e88e03e0612b520a50aa7336db33913c8f0fDemo

Governance

Governance type

multisig_councilDemo

Governance token

—Demo

Treasury size

$0Demo

Team size

58Demo

Jurisdiction

FRDemo

Incorporated entity

Morpho FoundationDemo

Anonymous team

noDemo

Security disclosure

yesDemo

IR SLA (hours)

24Demo

Reputation

GitHub

https://github.com/morpho/morphoDemo

Commit velocity (30d)

11Demo

Contributors

9Demo

Twitter

@morphoDemo

Discord

https://discord.gg/7by4kjDemo

Last incident

—Demo

KYT screening

cleanDemo

Threat History

0 recorded incidents

No recorded incidents for this entity. Threat history will populate as the Incident Ledger ingests live aggregator data (Phase 2a).

Peer Incidents · Method B

5 root-cause predicate matches

Vulnerable to: phishing drainer

Matches the phishing drainer predicate

18 historical peer events

GoldfinchNov 21, 2025Demo
$1M
BitgetNov 17, 2025Demo
$739.9K
OrcaApr 12, 2025Demo
$180.8K
Ether.fiFeb 6, 2025Demo
$443.4K
Alchemy PayNov 8, 2024Demo
$334.2K
+ 13 more

Vulnerable to: frontend dns hijack

Matches the frontend dns hijack predicate

12 historical peer events

Bridge.xyz / StripeJan 25, 2025Demo
$10.4M
UK FCA Digital SandboxJul 15, 2024Demo
$3.6M
CryptoQuantJun 24, 2024Demo
$517.3K
Three SigmaJun 24, 2024Demo
$2.7M
Celsius (defunct)Jun 2, 2024Demo
$22M
+ 7 more

Vulnerable to: supply chain npm

Matches the supply chain npm predicate

10 historical peer events

Beefy FinanceFeb 19, 2025Demo
$176.2K
PowerledgerFeb 11, 2025Demo
$7.4M
UnichainDec 23, 2024Demo
$8.8M
MEXCSep 26, 2024Demo
$1M
Mango MarketsAug 6, 2024Demo
$915.6K
+ 5 more

Vulnerable to: dvn collapse

Matches the dvn collapse predicate

8 historical peer events

Blast, Blockdaemon Wallet +2Dec 2, 2025Demo
$93.6M
Fordefi, XSGDFeb 14, 2025Demo
$17M
Element Finance, QuantozJul 20, 2024Demo
$1.1M
Mercado Bitcoin, SwellJun 19, 2024Demo
$15.3M
Internet Computer (DFINITY), Mantle +1Jun 17, 2024Demo
$10.3M
+ 3 more

Vulnerable to: mpc ceremony compromise

Matches the mpc ceremony compromise predicate

4 historical peer events

Protocol-Native Treasury Agents (DAO-embedded)May 3, 2024Demo
$58.8M
Coinbase CustodyAug 22, 2023Demo
$109M
Chronicle LabsFeb 26, 2023Demo
$50.5M
HegicApr 15, 2022Demo
$221.6M

Dependency Twins · Method A + B + C ensemble

Top 10 of 25 precomputed

Beefy Finance

Lending, Money Markets & CDPs · medium

A · Jaccard0.41

C · Cosine0.96

kms_provider = fireblocks_mpc
frontend_host = netlify
subsector_tags = general_defi, consumer_app, infra_tooling
oracle_providers = Chainlink

DigiFT

Tokenized Real-World Assets · critical

A · Jaccard0.33

C · Cosine0.74

kms_provider = fireblocks_mpc
frontend_host = netlify
oracle_providers = Chainlink
method_b_root_causes = supply_chain_npm

GMX

Stablecoin Issuers & Synthetic Dollars · medium

A · Jaccard0.24

C · Cosine0.83

subsector_tags = consumer_app, general_defi, infra_tooling
oracle_providers = Chainlink
method_b_root_causes = phishing_drainer
stablecoin_dependencies = USDC, USDT, DAI

Ether.fi Cash

Lending, Money Markets & CDPs · high

A · Jaccard0.24

C · Cosine0.75

subsector_tags = consumer_app, general_defi, infra_tooling
oracle_providers = Chainlink
method_b_root_causes = supply_chain_npm
stablecoin_dependencies = USDC, USDT, DAI

Yearn Finance

Lending, Money Markets & CDPs · medium

A · Jaccard0.38

C · Cosine0.86

frontend_host = netlify
subsector_tags = infra_tooling, consumer_app, general_defi
oracle_providers = Chainlink
stablecoin_dependencies = USDC, USDT, DAI

Kaiko (market integrity contexts)

Compliance, Forensics & Audit Tooling · medium

A · Jaccard0.08

C · Cosine0.89

frontend_host = netlify
subsector_tags = infra_tooling, general_defi, consumer_app
method_b_root_causes = phishing_drainer

Hegic

Stablecoin Issuers & Synthetic Dollars · medium

A · Jaccard0.29

C · Cosine0.68

kms_provider = fireblocks_mpc
subsector_tags = consumer_app, infra_tooling
oracle_providers = Chainlink
method_b_root_causes = mpc_ceremony_compromise

Compound

Lending, Money Markets & CDPs · medium

A · Jaccard0.34

C · Cosine0.86

subsector_tags = infra_tooling, general_defi, consumer_app
oracle_providers = Chainlink
stablecoin_dependencies = USDC, USDT, DAI

Balancer

Smart-Contract DEXs, AMMs & Aggregators · low

A · Jaccard0.34

C · Cosine0.86

subsector_tags = infra_tooling, consumer_app, general_defi
oracle_providers = Chainlink
stablecoin_dependencies = USDC, USDT, DAI

Unichain

Rollups, Data Availability & ZK Infra · high

A · Jaccard0.03

C · Cosine0.63

subsector_tags = general_defi, consumer_app
method_b_root_causes = frontend_dns_hijack, supply_chain_npm