defirisk.co
rubric v1.7.0

Solc version used (known-bug versions flagged)

Morpho V1 (Morpho Blue + MetaMorpho)'s assessment for RD-F-170 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Morpho Blue compiled with Solidity v0.8.19; Etherscan shows 4 low-severity known compiler bugs (VerbatimInvalidDeduplication, FullInlinerNonExpressionSplitArgumentEvaluationOrder, MissingSideEffectsOnSelectorAccess, LostStorageArrayWriteOnSlotOverflow); no high/critical bugs; per template, any known-bug-list presence = at least yellow.

Detail #

Solidity 0.8.19 is on the known-bug list per Etherscan's compiler bug info page for the Adaptive Curve IRM contract. Four low-severity bugs are flagged. VerbatimInvalidDeduplication affects verbatim assembly blocks and is unlikely to impact Morpho Blue's standard Solidity code. FullInlinerNonExpressionSplit requires specific non-default optimizer sequences. MissingSideEffectsOnSelectorAccess is low-severity. LostStorageArrayWriteOnSlotOverflow is also low-severity. None of these bugs are expected to affect Morpho Blue's lending logic given its code patterns, but per the methodology template, presence on the known-bug list with low/medium severity bugs = yellow.

Sources #

Methodology #

Identify the Solidity compiler version used for deployed bytecode and flag if it appears on the known-bug list (solc bugs.json or Vyper 0.2.15–0.3.0 range).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol morpho-v1 factor RD-F-170 score yellow collected_at 2026-04-30 21:19:13