Morpho: Midnight
Cantina reviewed Morpho (Morpho: Midnight) on 8 Aug 2026: 19 findings, 0 critical; 10 marked fixed, 9 acknowledged.
Report hosted on cantina.xyz.
Trustblock does not review code.
Findings19
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 2 | 0 |
| Low | 0 | 7 | 10 |
LowA phantom collateral can block liquidationsFixed
The report gives no description here.
LowApprovalRatifier approvals can replay across Midnight deploymentsFixed
The report gives no description here.
Lowclz opcode is not supported on all almost EVM-compatible chainsFixed
The report gives no description here.
LowDuring liquidation explicit check is missing to ensure collateralIndex is one the activated collateralsFixed
The report gives no description here.
LowForeign ratifiers can import delegated signer authority from another Midnight instanceFixed
The report gives no description here.
LowIn the presence of liquidity the lenders and the feeClaimer can avoid their credits getting slashedFixed
The report gives no description here.
LowInput validation is missing for offer.obligation.maturityFixed
The report gives no description here.
LowMinor issues (typos, comments, ...)Fixed
The report gives no description here.
LowObligation accounting breaks in the event of a hardforkFixed
The report gives no description here.
LowWhen lossIndex is at its max withdrawal would not be possible but other endpoints can be calledFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Morpho’s security record
MorphoSecurity firm
Cantina37 projects reviewed · 175 reports · latest Oct 2026
See Cantina’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us