# Morpho (MORPHO) Quantum Readiness Report

> Morpho has a QRI score of 4/100 and is assessed at Stage 1 (Quantum Risk Assessed) with low evidence confidence.

Evaluation date: 2026-06-05. Review status: draft. Evaluated scope: MORPHO ERC-20 governance/utility token (token layer only; protocol-layer Morpho Blue/Midnight lending markets not evaluated).

Morpho (MORPHO) is a standard ERC-20 governance/utility token for the Morpho DeFi lending protocol, deployed on Ethereum and multiple EVM-compatible chains. Under QRI Section 7.2 (Token Inheritance), the MORPHO token inherits Ethereum's base-layer cryptographic posture for transaction signatures and consensus — meaning all token transfers rely on quantum-vulnerable ECDSA. The token layer itself has no custom cryptographic mechanisms, no post-quantum features, no published quantum risk assessment, and no migration roadmap. Token-specific governance is controlled by a 5/9 Gnosis Safe multisig (morpho.eth) and a 3/5 Rewards multisig, both entirely ECDSA-based. A quantum adversary capable of breaking ECDSA could compromise these multisigs to drain the treasury (~35.7% of 1B total supply allocated to DAO), upgrade the token contract maliciously, or alter protocol parameters. The LayerZero OFT cross-chain bridge (currently paused on Arbitrum) introduces an additional quantum-vulnerable path when active. Morpho Midnight, an upcoming fixed-rate protocol, mentions optional post-quantum signature support in its whitepaper, but this is a design option in a not-yet-deployed system and does not constitute current production protection. The QRI Score of 4 reflects the complete absence of quantum-specific preparedness, protection, migration, or assurance at the token layer, capped at 10 by the lack of any public cryptographic inventory. The Morpho DAO should prioritize publishing a cryptographic inventory, migrating governance multisigs to PQ-safe smart contract wallets once Ethereum supports them (e.g., post-EIP-8141), and developing a token-specific quantum migration plan.

## Core resources

- [Morpho QRI report](https://qrindex.org/projects/morpho/): Human-readable assessment with score, stage, evidence, blockers, risks, and assurance notes.
- [Morpho structured report data](https://qrindex.org/projects/morpho/report.json): Complete report as JSON for deterministic machine processing.
- [QRI methodology](https://qrindex.org/methodology/): Scoring model, evidence handling, readiness stages, confidence, assurance, and report status.
- [All QRI project reports](https://qrindex.org/llms.txt): Score-ranked index of every published project assessment.
- [Morpho official website](https://www.coingecko.com/en/coins/morpho): Project-maintained website.



## Evidence sources

- [Evidence source 1](<https://docs.morpho.org/>): Public source cited by the Morpho QRI assessment.
- [Evidence source 2](<https://morpho.org/>): Public source cited by the Morpho QRI assessment.
- [Evidence source 3](<https://github.com/morpho-org>): Public source cited by the Morpho QRI assessment.
- [Evidence source 4](<https://forum.morpho.org/>): Public source cited by the Morpho QRI assessment.
- [Evidence source 5](<https://docs.morpho.org/get-started/resources/audits/>): Public source cited by the Morpho QRI assessment.
- [Evidence source 6](<https://github.com/morpho-org/morpho-token>): Public source cited by the Morpho QRI assessment.
- [Evidence source 7](<https://etherscan.io/token/0x58d97b57bb95320f9a05dc918aef65434969c2b2>): Public source cited by the Morpho QRI assessment.
- [Evidence source 8](<https://docs.morpho.org/learn/governance/organization/>): Public source cited by the Morpho QRI assessment.
- [Evidence source 9](<https://etherscan.io/address/0xcBa28b38103307Ec8dA98377ffF9816C164f9AFa>): Public source cited by the Morpho QRI assessment.
- [Evidence source 10](<https://etherscan.io/address/0xF057afeEc22E220f47AD4220871364e9E828b2e9>): Public source cited by the Morpho QRI assessment.
- [Evidence source 11](<https://www.coingecko.com/en/coins/morpho>): Public source cited by the Morpho QRI assessment.
- [Evidence source 12](<https://app.morpho.org/>): Public source cited by the Morpho QRI assessment.
- [Evidence source 13](<https://github.com/morpho-org/metamorpho/blob/main/audits/2023-11-14-metamorpho-cantina-managed-review.pdf>): Public source cited by the Morpho QRI assessment.
- [Evidence source 14](<https://github.com/runtimeverification/publications/blob/main/reports/smart-contracts/Morpho-Audit-Report.pdf>): Public source cited by the Morpho QRI assessment.
- [Evidence source 15](<https://etherscan.io/token/0x58d97b57bb95320f9a05dc918aef65434969c2b2#code>): Public source cited by the Morpho QRI assessment.