Morpho Pre-Liquidation audit
ABDK Consulting reviewed Morpho (Morpho Pre-Liquidation audit) on 1 Nov 2024: 31 findings, 0 critical; 3 marked fixed, 28 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings31
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 3 | 0 |
| Low | 0 | 25 | 3 |
MediumProcedural in EventsLib.solAcknowledged
The report gives no description here.
MediumThe semantics of the returned values is unclear.Acknowledged
The report gives no description here.
MediumThis line requires the whole bytecode of the ”PreLIquidation” contract to be hashed, which is inefficient.Acknowledged
The report gives no description here.
LowBad datatype in IPreLiquidation.solAcknowledged
The report gives no description here.
LowBad datatype in PreLiquidation.solAcknowledged
The report gives no description here.
LowBad datatype in PreLiquidation.solAcknowledged
The report gives no description here.
LowBad datatype in PreLiquidationAddressLib.solAcknowledged
The report gives no description here.
LowBad datatype in PreLiquidationAddressLib.solAcknowledged
The report gives no description here.
LowBad datatype in PreLiquidationFactory.solAcknowledged
The report gives no description here.
LowBad datatype in PreLiquidationFactory.solAcknowledged
The report gives no description here.
Show 10 more
LowDeclaring a top-level structure in a file named after an interface is a bad practice, as it makes it harder navigating through code.Acknowledged
The report gives no description here.
LowNames for the returned values are specified in the comment but not in the code.Acknowledged
The report gives no description here.
LowSpecifying a compiler version range without upper bound is a bad practice, as it is not possible to guarantee compatibility with future major versions.Acknowledged
The report gives no description here.
LowSpecifying a particular compiler version makes it harder migrating to newer versions.Acknowledged
The report gives no description here.
LowSpecifying a particular compiler version makes it harder migrating to newer versions.Acknowledged
The report gives no description here.
LowSuboptimal in ErrorsLib.solAcknowledged
The report gives no description here.
LowThe number format for these fields is unclear.Acknowledged
The report gives no description here.
LowThe number format for these variables is unclear.Acknowledged
The report gives no description here.
LowThe semantics of this function is unclear.Acknowledged
The report gives no description here.
LowThis check is redundant, as it is anyway possible to pass a dead Morpho address.Acknowledged
The report gives no description here.
Show 8 more
LowThis version requirement is inconsistent with other files in the same code base.Acknowledged
The report gives no description here.
LowThis version requirement is inconsistent with other files in the same code base.Acknowledged
The report gives no description here.
LowWe didn’t review these files.Acknowledged
The report gives no description here.
LowWe didn’t review these files.Acknowledged
The report gives no description here.
LowWe didn’t review this file.Acknowledged
The report gives no description here.
LowWe didn’t review this file.Acknowledged
The report gives no description here.
LowWe didn’t review this file.Acknowledged
The report gives no description here.
LowWe didn’t review this file.Acknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Morpho’s security record
MorphoSecurity firm
ABDK Consulting31 projects reviewed · 64 reports · latest Jan 2026
See ABDK Consulting’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us