public-allocator
Cantina reviewed Morpho (public-allocator) on 10 May 2024: 5 findings, 0 critical; 2 marked fixed, 3 acknowledged.
No open critical findings
Open the reportOpen Morpho’s security record
Report hosted on cantina.xyz.
Trustblock does not review code.
Findings5
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 1 | 0 |
| Low | 0 | 2 | 2 |
MediumFunds can be redirected to the idle market by reaching the MetaMorpho supply cap using a flash loanAcknowledged
The report gives no description here.
LowAllocator can drain the MetaMorpho vault if a future IRM queries token balanceAcknowledged
The report gives no description here.
LowreallocateTo function does not check for slippage, leading to dust loss due to rounding errorAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Morpho’s security record
MorphoAudits20 audits by 3 firmsLast audit Sep 2026, by Cantina.
Critical findingsNo open critical findingsAcross 20 reports.
Open Morpho’s security recordSecurity firm
Cantina37 projects reviewed · 175 reports · latest Oct 2026
See Cantina’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us