# Morpho: bug bounty program on Cantina

> Morpho is a bug bounty program on Cantina. 9 assets are listed in scope, 9 of them bounty-eligible.

- **Company:** Morpho
- **Platform:** Cantina
- **Program page:** https://cantina.xyz/bounties/35a5f0a1-2ffd-432c-8f3b-77d169add8c3
- **Pays bounties:** yes
- **Submissions:** open
- **Launched:** March 27, 2024
- **BugRater grade:** not graded yet (fewer than three reviewers)
- **BugRater page:** https://bugrater.com/programs/morpho

## Scope

As imported from Cantina on October 23, 2026: 9 assets in scope (9 bounty-eligible), 0 out of scope. The policy page is the authority.

- `https://app.morpho.org/` (URL): in scope, bounty-eligible, max severity critical
- `https://curator-v1.morpho.org/` (URL): in scope, bounty-eligible, max severity critical
- `https://curator.morpho.org/` (URL): in scope, bounty-eligible, max severity critical
- `https://docs.morpho.org/developers/contracts/addresses/` (URL): in scope, bounty-eligible, max severity critical
- `https://fallback.morpho.org/` (URL): in scope, bounty-eligible, max severity critical
- `https://github.com/morpho-org/sdks` (SOURCE_CODE): in scope, bounty-eligible, max severity critical
- `https://liquidation.morpho.org/` (URL): in scope, bounty-eligible, max severity critical
- `https://markets.morpho.org/` (URL): in scope, bounty-eligible, max severity critical
- `https://morpho.org/` (URL): in scope, bounty-eligible, max severity critical

---

Generated October 23, 2026 from BugRater data. Platform figures are the platform's own; grades and reviews are BugRater's. Agents can check targets against this scope with the check_scope tool at https://bugrater.com/mcp.