FORESHOCK

Protocols

Request coverage

Only protocols with enough independently verified data to trust a score appear here. This is a permanent rule, not a temporary gap.

How protocols get listed: a protocol is added once it clears the same sufficiency threshold as everything else here. Which protocol gets curated next is ordered by TVL rank and by demand from coverage requests, so a request can move a protocol up the queue.

Morpho Blue

confidence low· verified weight 75% · updated 2026-07-26 · methodology 0.7.0

ChainsMulti-ChainEthereumBaseHyperliquid L1Robinhood ChainMonad+36 moreMorpho Blueofficial site →

Confidence capped at low:

  • this methodology version hasn't been backtested against any historical incidents in this protocol's bucket yet
  • not because this protocol's data is thin (75% of category weight is verified data)
Why this rating
The highest-signal researched categories behind this assessment.

Audit profile

verified

3 audits on record, most recent audit is over 2 years old; the most recent audit found 1 High and 8 Medium severity issues. This reflects code quality at the time of that audit only, not a claim that these specific issues are still unresolved today.

Code characteristics

verified

admin key: multisig, 5/9 multisig (requires 5 of 9 keys to act), open source.

TVL profile

verified

TVL change (7%) is within a stable range.

Governance attack surface

verified

top 10 holders control 21.62%, adjusted figure may still include pooled custody (untagged exchanges, infrastructure contracts) due to tagging coverage limits; exclusions require positive identification.

Historical incidents

verified

no known own or inherited incidents.

Risk-reducing factors
Researched findings that lower this protocol's assessed risk.

Historical incidents

no known own or inherited incidents.

Governance attack surface

top 10 holders control 21.62%, adjusted figure may still include pooled custody (untagged exchanges, infrastructure contracts) due to tagging coverage limits; exclusions require positive identification.

Protocol age

924 days live, past the ~1yr floor; treated the same as any older protocol, not scored progressively safer with more age.

TVL profile

TVL change (7%) is within a stable range.

Dependencies

No dependency data on record.

Incident history

No material incidents on record.

Audit history
  • Cantina 2024-01-05

    Unresolved issues:

    151 low, 8 medium, 1 high, 0 critical

  • Cantina 2023-11-13

    Unresolved issues:

    4 low, 1 medium, 4 high, 0 critical

  • OpenZeppelin 2023-10-13

    Unresolved issues:

    9 low, 1 medium, 1 high, 0 critical

This assessment follows Foreshock's published methodology. Exact category weights, scoring rules, thresholds, and aggregation logic are proprietary and not shown here. How to interpret this assessment

Do you hold a position in this protocol?

Get an email when this assessment materially changes.

Monitor this protocol