defirisk.co
rubric v1.7.0

Admin has mint() with unlimited max

Morpho V1 (Morpho Blue + MetaMorpho)'s assessment for RD-F-042 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

MORPHO token is ERC1967 upgradeable proxy owned by DAO multisig. Max supply 1B enforced in current implementation. DAO could theoretically upgrade implementation to modify cap — requires Snapshot vote + 5-of-9 multisig + 24h Delay Modifier.

Sources #

Methodology #

Determine whether an admin-callable `mint` on a protocol token has no supply cap or an unlimited maximum supply.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol morpho-v1 factor RD-F-042 score yellow collected_at 2026-04-30 21:19:13