Audit recency
Morpho V1 (Morpho Blue + MetaMorpho)'s assessment for RD-F-002 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Most recent audit of any deployed code is ~546 days ago (Nov 2024 OZ+Spearbit on MetaMorpho v1.1); Morpho Blue core immutable singleton last audited Jan 2024 (~1185 days), though immutability makes re-audit structurally unnecessary.
Detail #
The Morpho Blue core singleton (immutable, non-upgradeable) was last comprehensively audited via the Cantina competition ending January 5, 2024. Since the contract cannot change, no re-audit is structurally required for the core. MetaMorpho v1.1 was audited by OZ and Spearbit in November 2024 (~546 days ago). Periphery (bundlers, adapters) was audited by Spearbit in Oct 2024 and ABDK in Nov 2024. The gap falls in the yellow range (366-730 days) for the most recent audit of any portion of the deployed system. Green would require ≤365 days.
Sources #
- Docshttps://docs.morpho.org/get-started/resources/audits/retrieved 2026-04-27
Methodology #
Measure the number of days between today and the sign-off date of the most recent audit report covering the currently-deployed bytecode.
See the full factor methodology and distribution across all protocols →