Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

In brief. Morpho is a bug bounty program on Cantina. 9 assets are listed in scope, 9 of them bounty-eligible. As of Oct 18, 2026. Markdown for agents

NR Unrated

Morpho

Morpho Cantina
3 more reviews needed for a grade
Write a review Claim this company profile

Work at Morpho? Claim it to respond to reviews as the verified owner.

Found a vulnerability?

If you'd rather not deal with the vendor yourself, a BugRater analyst will submit it to them for you, with your explicit permission, and tell you what they said.

Ask BugRater to submit it

Reports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.

Reviews

0 published

No reviews yet.

Be the first to review

Program profile Cantina, imported

Cantina published these facts on the program's page. Researchers did not report them, and they don't count toward the BugRater grade.

Submissions
Open
Launched
Mar 2024

Scope

9 assets
AssetTypeEligibilityMax severity
https://app.morpho.org/ URL ✓ bounty Critical
https://curator-v1.morpho.org/ URL ✓ bounty Critical
https://curator.morpho.org/ URL ✓ bounty Critical
https://docs.morpho.org/developers/contracts/addresses/ URL ✓ bounty Critical
https://fallback.morpho.org/ URL ✓ bounty Critical
Show all 9 assets
AssetTypeEligibilityMax severity
https://github.com/morpho-org/sdks SOURCE CODE ✓ bounty Critical
https://liquidation.morpho.org/ URL ✓ bounty Critical
https://markets.morpho.org/ URL ✓ bounty Critical
https://morpho.org/ URL ✓ bounty Critical