Ignored bounty disclosure

Morpho V1 (Morpho Blue + MetaMorpho)'s assessment for RD-F-008 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No evidence of ignored bounty disclosure; Oct 2024 incident was market-level oracle misconfiguration (not protocol vulnerability); Apr 2025 was frontend-only with $0 net loss.

Sources #

URL
https://morpho.org/blog/morpho-app-incident-april-10-2025/retrieved 2026-04-27

Methodology #

Determine whether any prior post-mortem documents a disclosed vulnerability that was reported to the team and not actioned before exploit.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol morpho-v1 factor RD-F-008 score green collected_at 2026-04-30 21:19:13