Morpho: Midnight
Cantina reviewed Morpho (Morpho: Midnight) on 8 Aug 2026: 19 findings, 0 critical; 10 marked fixed, 9 acknowledged.
Report hosted on cantina.xyz.
Trustblock does not review code.
Findings19
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 2 | 0 |
| Low | 0 | 7 | 10 |
MediumObligation can be created before default fees are set for a loan tokenAcknowledged
The report gives no description here.
MediumZero Oracle Prices are allowedAcknowledged
The report gives no description here.
LowCalls to take() can be forced to revert via front-runningAcknowledged
The report gives no description here.
LowContinuous fee calculation could round down to zero for tokens with small decimalsAcknowledged
The report gives no description here.
LowDeltas of pending fee for buyer, seller and position updates round in the wrong directionAcknowledged
The report gives no description here.
LowEnforce stricter trading fee roundingAcknowledged
The report gives no description here.
LowLoss index inflationAcknowledged
The report gives no description here.
LowTrust assumptions for buyerCallbackAcknowledged
The report gives no description here.
LowVerification and potential optimisation of countBits implementationAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Morpho’s security record
MorphoSecurity firm
Cantina37 projects reviewed · 175 reports · latest Oct 2026
See Cantina’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us