Morpho Review

How Morpho scores in crypto lending

This entry rates Morpho Blue, Morpho's variable-rate market contracts, together with the governance and audit record that covers them, in our lending ranking. The basis is desk research of Morpho's documentation and the morpho-blue GitHub repository, checked on November 1, 2026. No position was opened. The category uses five criteria, each marked 0 to 10 and weighted equally, as set out in our ratings methodology.

The overall score is the plain average: (8 + 10 + 10 + 7 + 9) ÷ 5 = 44 ÷ 5 = 8.8, up from 8.0. Two marks moved on this pass. Audit disclosure rose from 7 to 9, because Morpho's audits page now lists 34 reports rather than the three the old mark counted. Governance and timelock rose from 5 to 7, because the governance page sets out a limited list of powers, a named 5-of-9 multisig, and core contracts that cannot be changed. The old entry also said that market parameters were not immutable; Morpho's market documentation says they are, and that statement has been corrected.

Strongest criteria: licence and liquidation terms

Licence & code openness (10)

The LICENSE file in morpho-blue is the GNU General Public License, version 2. That is a recognised open-source licence with no change date and no restriction on production use, which the rubric marks highest. It is the only 10 for licence among the protocols in this ranking.

Liquidation terms (10)

A Morpho Blue market can use only a liquidation loan-to-value (LLTV) from a governance-approved list: 0%, 38.5%, 62.5%, 77%, 86%, 91.5%, 94.5%, 96.5% or 98%. The market documentation says each parameter "persists in perpetuity" once the market exists. The liquidation incentive factor is set by formula, min(1.15, 1 ÷ (0.3 × LLTV + 0.7)), so an 86% market pays a bonus of about 5%. The docs state that the whole incentive goes to the liquidator and that the protocol takes no fee. A borrower can work out the threshold and the penalty from the market's name alone, which is what the rubric asks for. Liquidation can be full or partial, so there is no close factor to cap a single event.

Audit disclosure (9)

The audits page lists 34 reports, each with a firm, a scope and a date. They come from Spearbit, OpenZeppelin, Cantina, Certora, ChainSecurity, Blackthorn, Zellic, Trust Security, StErMi, ABDK, Omniscia, Lexfo and Securing. The newest, from Blackthorn and Trust Security, are dated September 24, 2026 and cover the Midnight fixed-rate product. The mark stops short of 10 for two reasons. Most of the list covers vaults and Midnight, while Morpho Blue itself has three reports from late 2023 (OpenZeppelin, Spearbit and a Cantina competition). One date on the page also reads "2025-15-12", which is not a valid date. Audits check code at a point in time and do not insure deposits.

Weaker criteria: governance and fees

Governance & timelock (7): limited powers, no delay

Morpho's governance page says the core contracts are immutable and lists what governance can do. It controls the treasury and the MORPHO token contract, can switch on the protocol fee, can approve new LLTVs and interest rate models, and owns the morpho.eth name. Token holders vote on Snapshot, with 500,000 MORPHO needed to propose, and a 5-of-9 multisig at a published address carries out the result. None of these powers can change an existing market's LLTV, oracle or rate model. No timelock is stated, so an approved fee switch could take effect without a waiting period. That missing delay is why the mark matches Euler's 7, where governance limits are also fixed in code, rather than Aave's 9.

Fee disclosure (8)

The protocol fee is capped at 25% of the interest borrowers pay, and the liquidation page states that the protocol takes no fee from liquidations. In Vaults V2 the curator's performance fee is capped at 50% of interest and the management fee at 5% of assets a year, and fee changes go through a timelock. The governance page describes the fee switch but does not say whether it is on in any market, so the actual rate has to be read from each market. The rubric scores published caps above undocumented fields, but below published live figures.

What the score does not cover

• Rates and yields. Interest rates come from the AdaptiveCurveIRM and move with utilization; they were not measured.
• Curator choices. Vault strategy, caps and actual fees are set by third-party curators and vary by vault. Our guide to reading a DeFi lending market covers what to check.
• Oracle risk. Each market names its own oracle; oracle quality is outside the five criteria.
• Morpho Midnight. The fixed-rate product has its own audits but is not what this entry scores.

Morpho vs Venus Protocol and Kamino

Morpho leads the category at 8.8. Venus Protocol is next at 7.6. It marks 9 for governance against Morpho's 7, but 5 for fee disclosure and 5 for liquidation terms, where Morpho marks 8 and 10. Kamino scores 7.2. It beats Morpho on fee disclosure (10 against 8) by publishing live spreads per market, but marks 4 for its delayed-open licence against Morpho's 10.

Who this rating suits

The score suits borrowers and lenders who want market terms they can read before they enter and that cannot change afterwards, under an open-source licence. Readers who want a stated delay on every governance action, or live protocol fee figures without checking each market, should weigh the governance and fee marks. Isolated markets still carry oracle and liquidity risk, and borrowing against volatile collateral can end in liquidation. This rating describes published documentation and is not advice to lend or borrow.