Morpho Midnight releases audit reports on GitHub, showing no critical vulnerabilities

Morpho Midnight, the fixed-rate and fixed-maturity lending protocol built by the Morpho team, has made its full collection of security audit reports publicly available on GitHub. The reports, conducted by five different security firms and spanning from April to early September 2026, paint a relatively clean picture: no critical vulnerabilities were found. What the audits actually found The audit reports now live in the /audits folder of Morpho Midnight’s GitHub repository. They include assessments from Spearbit, Blackthorn, Trust Security, and StErMi, along with results from a Cantina competition, which is essentially a bug bounty format where multiple security researchers compete to find flaws. Across all five reviews, findings were categorized as low to medium severity. No critical issues were flagged. That’s notable given the protocol’s architecture is entirely new. Morpho Midnight isn’t a fork or a minor modification of an existing lending protocol. It was built from scratch over roughly two years, with a whitepaper that was open-sourced around May 28, 2026. The codebase itself is approximately 1,100 lines, which is relatively compact for a lending protocol. Beyond traditional ...