External EngagementExternal engagementCantinaFixed-rate lending

Audit Report

Morpho Midnight — Cantina competition

Two findings submitted by the MEDUSA team in an open audit competition.

Public once Cantina judging closes (2026-06-12)

Tier

Competition (Cantina)

Submitted

2026-05-28

Findings

2

2 Low

Disclosure Notice

External-engagement IP belongs to Morpho. The full Morpho Midnight audit work is not published by MEDUSA; only the public Cantina submissions above. Links activate when Cantina makes findings public after the 2026-06-12 judging close.

Findings

Preview of submitted findings.

  • #133

    Referral fee semantics differ across MidnightBundles

    Scope: MidnightBundles

    Validated as not-a-duplicate vs. Spearbit and Blackthorn submissions.

    View on Cantina ↗
    Low
  • #137

    MidnightBundles retains permanent max approval

    Scope: MidnightBundles

    By-design risk flagged for owner consideration.

    View on Cantina ↗
    Low