Morpho risks explained: what can go wrong
Lending on Morpho carries smart contract, oracle, curator, collateral, liquidity and bad debt risk. See how each works, past incidents and how to check them.
Updated
Morpho's design limits some risks and moves others around. Markets are isolated, so a bad loan in one market cannot drain another. But isolation does not make any single market safe, and vaults add a layer of human judgement on top. This guide goes through the main risks one by one, describes real incidents, and shows where to check each risk on this site.
Smart contract risk
A bug in the code could lose money no matter how careful everyone else is. Morpho's core contracts are small, public and cannot be upgraded or paused, which removes the risk of a bad upgrade but also means a bug cannot be patched in place. According to Morpho's risk documentation, the contracts have been audited many times and formally verified, and a bug bounty of up to 2.5 million dollars covers Morpho's markets, vaults and Midnight.
The apps people use to reach the contracts are a separate risk. On 10 April 2025, an update to the Morpho app sent some token approvals to the wrong contract. A known white hat intercepted a user's transaction and returned the funds, the team rolled the update back within four minutes, and Morpho reported that no funds were lost and the contracts were not affected.
Oracle risk
Every market prices its collateral with an oracle chosen when the market is created, and it can never be changed. If the oracle is wrong, the market is wrong. Two patterns have caused real losses:
- A misconfigured oracle. In October 2024, a PAXG/USDC market was created with an oracle that valued PAXG far too high because of a decimal scaling error. A user deposited about 350 dollars of PAXG and borrowed about 230,000 USDC. The loss stayed inside that one market.
- An oracle that does not follow the market. Fixed-price and exchange-rate oracles keep reporting a token's intended value even when its market price collapses. Loans backed by it are then never liquidated, and lenders are left with collateral worth far less than the market thinks.
More detail is in Morpho oracles explained.
Collateral risk
Lenders are only as safe as the collateral behind the loans. Established assets such as bitcoin and ETH trade in deep markets, so liquidators can sell them quickly. Newer tokens, especially synthetic dollars and tokens that are themselves yield strategies, can lose most of their value in hours, and can be hard to sell when they do. Higher vault yields usually come from lending against this kind of collateral.
Curator risk
A vault is only as careful as its curator. The curator decides which collateral, oracles and LLTVs its depositors are exposed to, and how quickly to react when something breaks. Timelocks give warning of risky changes, but they cannot stop a curator from picking a risky market in the first place. See Morpho curators explained.
Liquidity risk
A lender can only withdraw money that is not currently lent out. When a market reaches 100% utilization, its lenders must wait until borrowers repay or new lenders arrive. The interest rate model pushes rates up sharply in that situation to bring borrowers back, but a wait of hours or days is possible. In a panic, many depositors try to leave at once, and even vaults with no bad loans can be briefly short of cash.
Bad debt risk
If collateral falls so fast that liquidating all of it cannot repay a loan, the rest is bad debt. On Morpho, bad debt is written off when the last collateral is liquidated, and every lender in that market loses in proportion to their share. Depositors in a vault that lends to that market carry the loss through the vault. The mechanics are in Morpho LLTV and liquidations explained.
Real incidents
| When | What happened | Effect on Morpho users |
|---|---|---|
| October 2024 | A PAXG/USDC market was created with a misconfigured oracle | About 230,000 dollars borrowed against about 350 dollars of collateral. The loss was limited to that market's lenders |
| January 2025 | USD0++, a token from the Usual protocol, fell below one dollar after Usual changed its redemption terms | Markets that valued USD0++ at a fixed one dollar did not liquidate borrowers. Lenders rushed out, and those markets sat at 100% utilization, delaying withdrawals |
| 10 April 2025 | A Morpho app update misrouted token approvals | A white hat intercepted and returned the affected funds. No funds were lost and the contracts were not affected |
| November 2025 | Stream Finance disclosed a loss of about 93 million dollars on 4 November. Its xUSD token and Elixir's deUSD collapsed | A Morpho co-founder said 1 of about 320 vaults in the Morpho app had direct xUSD exposure, and reports identified it as a vault curated by MEV Capital. MEV Capital said its Ethereum USDC vault realized bad debt of nearly 3.6% of its assets when it removed an Elixir sdeUSD market. A few other vaults saw withdrawal delays lasting hours |
| 22 March 2026 | An attacker minted about 80 million unbacked USR, Resolv's synthetic dollar, and its price collapsed | Markets that priced Resolv's wstUSR near its old value let borrowers post cheap tokens and take out USDC. Morpho co-founder Paul Frambot said about 15 vaults with more than 10,000 dollars of liquidity were affected, and Gauntlet-curated vaults were reported to be among them. Post-incident reports said public allocator settings moved vault liquidity into the broken markets for a time. In June 2026 Gauntlet and Resolv reached a compensation agreement for affected Gauntlet vault users, according to press reports |
These summaries follow what Morpho, the curators involved and reputable news outlets reported at the time. They are not a judgement of who was at fault.
A common thread runs through several of them: collateral that was meant to hold a steady value, priced by an oracle that assumed it would, in vaults that allocated to it for extra yield. Vaults that stayed with established collateral were not hit by these losses.
How to check each risk on this site
| Risk | Where to look |
|---|---|
| Liquidity | The vaults page shows how much of each vault can be withdrawn now, and the markets page shows each market's utilization |
| Collateral and oracle exposure | Each vault's allocation shows which markets, and so which collateral and oracles, it lends against |
| Curator | The curators page lists every curator's vaults and deposits |
| Bad debt | The bad debt page lists losses that markets have realized |
| Liquidations | The liquidations page shows recent liquidations, a sign of stress in a market |
Common questions
Is Morpho safe?
No lending protocol is risk-free. Morpho's core contracts are small, immutable and heavily audited, but lenders still face oracle, collateral, curator, liquidity and bad debt risk, and past incidents have caused real losses.
Can one bad market on Morpho affect my vault?
Only if your vault lends into that market. Losses stay inside the market where they happen, and reach a vault in proportion to how much the vault had there.
Why can't I withdraw from a Morpho vault?
The markets your vault lends into may be fully borrowed. You can withdraw once borrowers repay, new lenders arrive or the curator moves liquidity, which usually happens as rates rise.
What caused the biggest Morpho vault losses?
Mostly collateral tokens meant to hold a steady value, such as synthetic dollars, that collapsed while their markets' oracles kept pricing them near their old value.