Search

Search for projects by name

Value SecuredActivityData postedRisk summaryRisk analysisRollup stageData availabilityState validationOperatorWithdrawalsPermissionsSmart contracts

Morph logo
Morph

Badges

About

Morph is an EVM compatible rollup. It operates as an optimistic rollup with ZK fault proofs and has plans for decentralizing the Sequencer. Their mission is to build the first blockchain for consumers, where user-friendly applications integrate seamlessly...

  • Total Value SecuredTVS
    $27.08 M3.65%
  • Past day UOPSDaily UOPS
    0.0456.1%
  • Stage
  • Gas token
    ETH
  • Type
    Optimistic Rollup
  • Purpose
    Universal
  • Chain ID
    2818

    • Tokens breakdown

    Value secured breakdown

    View TVS breakdown
    Sequencer failureState validationData availabilityExit windowProposer failure
    Explore more in Discovery UI

    Badges

    About

    Morph is an EVM compatible rollup. It operates as an optimistic rollup with ZK fault proofs and has plans for decentralizing the Sequencer. Their mission is to build the first blockchain for consumers, where user-friendly applications integrate seamlessly...

    Value SecuredView TVS breakdown
    Total
    Canonically BridgedCanonically Bridged ValueCanonical
    Natively MintedNatively Minted TokensNative
    Externally BridgedExternally Bridged ValueExternal
    ETH & derivatives
    Stablecoins
    BTC & derivatives
    Other
    View TVS breakdown
    Activity

    2025 Jan 04 — 2026 Jan 04

    Past Day UOPS
    0.04
    Past Day Ops count
    3.70 K
    Max. UOPS
    12.44
    2025 Aug 09
    Past day UOPS/TPS Ratio
    1.00
    Data posted

    This section shows how much data the project publishes to its data-availability (DA) layer over time. The project currently posts data toEthereumEthereum.

    2025 Jan 04 — 2026 Jan 04

    Data posted
    4.04 GiB
    Avg size per day
    11.30 MiB
    Avg size per L2 UOP
    117.41 B
    Risk summary

    Funds can be stolen if

    1. a contract receives a malicious code upgrade. There is no delay on code upgrades (CRITICAL),
    2. no whitelisted challenger posts a challenge for an incorrect state root.

    Funds can be frozen if

    1. the operator censors withdrawal transaction.

    Users can be censored if

    1. the operator refuses to include their transactions.

    MEV can be extracted if

    1. the operator exploits their centralized position and frontruns user transactions.
    Risk analysis
    Sequencer failureState validationData availabilityExit windowProposer failure
    Sequencer failure
    No mechanism

    There is no mechanism to have transactions be included if the sequencer is down or censoring.

    State validation
    Fraud proofs (1R, ZK)

    Fraud proofs allow actors watching the chain to prove that the state is incorrect. Single round proofs (1R) only require a single transaction to resolve. ZK proofs are used to prove the correctness of the state transition. The system currently operates with at least 5 whitelisted challengers external to the team.

    Data availability
    Onchain

    All of the data needed for proof construction is published on Ethereum L1.

    Exit window
    None

    There is no window for users to exit in case of an unwanted regular upgrade since contracts are instantly upgradable.

    Proposer failure
    Cannot withdraw

    Only the whitelisted proposers can publish state roots on L1, so in the event of failure the withdrawals are frozen.

    Rollup stage
    Morph
    Morph is a
    Stage 0
    Optimistic Rollup.
    Learn more about Rollup stages
    Please keep in mind that these stages do not reflect rollup security, this is an opinionated assessment of rollup maturity based on subjective criteria, created with a goal of incentivizing projects to push toward better decentralization. Each team may have taken different paths to achieve this goal.
    Data availability

    All data required for proofs is published on chain

    All the data that is used to construct the system state is published on chain in the form of cheap blobs or calldata. This ensures that it will be available for enough time.

    1. Rollup.sol - Etherscan source code commitBatch() and commitBatchWithBlobProof() functions
    Learn more about the DA layer here: Ethereum logoEthereum
    State validation
    Fraud proofs

    Morph uses a one round fault proof system where whitelisted Challengers, if they find a faulty state root within the 2d challenge window, can post a 1 WEI bond and request a ZK proof of the state transition. At least 5 Challengers are operated by entities external to the team. After the challenge, during a 3d proving window, a ZK proof must be delivered, otherwise the state root is considered invalid and the root proposer bond, which is currently set to 1 ETH, is slashed. The zkVM used is SP1 from Succinct. If the valid proof is delivered, the Challenger loses the challenge bond. The Morph Multisig can revert unfinalized batches.

    • Funds can be stolen if no whitelisted challenger posts a challenge for an incorrect state root.

    1. Whitelisted Challengers - Morph Docs
    2. Rollup.sol - Etherscan source code, commitBatch(), challengeState(), proveState() functions

    Program Hashes

    Name
    Hash
    Repository
    Verification
    Used in
    0x0059...8d7e
    		Code unknown
    None
    Operator

    Morph uses decentralised sequencer network

    The system uses a decentralised sequencer/proposer network. At the moment all sequencers are run by Morph and - from the point of Ethereum - they don’t need to reach consensus on a block as any one of them can propose a block with an L2 state root on Ethereum. There is a plan to use tendermint with BLS signatures to verify consensus after Petra upgrade.

    • MEV can be extracted if the operator exploits their centralized position and frontruns user transactions.

    1. L1Staking.sol - Etherscan source code, verifySignature() function

    Users can't force any transaction

    There is no general mechanism to force the sequencer to include the transaction.

    • Users can be censored if the operator refuses to include their transactions.

    1. EnforcedTxGateway proxy - PAUSED - Etherscan source code
    2. EnforcedTxGateway.sol implementation - Etherscan source code
    3. Rollup.sol - Sequencer decides if / how many transactions to dequeue
    Withdrawals

    Regular messaging

    The user initiates L2->L1 messages by submitting a regular transaction on this chain. When the block containing that transaction is settled, the message becomes available for processing on L1. The process of block finalization takes a challenge period of 2d to complete.

    • Funds can be frozen if the operator censors withdrawal transaction.

    1. L1ETHGateway.sol - Etherscan source code, finalizeWithdrawETH function
    Permissions
    A dashboard to explore contracts and permissions
    Go to Disco
    Disco UI Banner
    Disco UI BannerExplore in Disco

    Ethereum

    Roles:

    Sequencer (5) EOA 7EOA 12EOA 17EOA 29EOA 39

    Actors allowed to commit transaction batches and propose and prove state roots

    Actors:

    L1Staking 0x0Dc4…43F7

    Contract keeping track of stakers which act as sequencers/proposes. It is responsible for staker registration and withdrawals and for verifying BLS signatures of stakers (currently not implemented).

    • Can interact with Whitelist
      • can send gasless transactions to L2 (L2 gas fee waived)
    Morph Multisig 2 0xB822…4377

    A Multisig with 3/5 threshold.

    • Can interact with L1Staking
      • whitelist stakers (sequencer/proposer), remove stakers, manage staking and slashing amount and reward config
    • Can interact with MultipleVersionRollupVerifier
      • register new verifiers to be used starting from a given L2 batch index
    • Can interact with L1GatewayRouter
      • manage token to escrow mapping and (un-)register escrows
    • Can interact with Rollup
      • can pause and unpause, revert unfinalized batches, update proof window and finalization period, manage challengers, modify the verifier address
    • Can interact with EnforcedTxGateway
      • pause and unpause, update the fee vault
    • Can interact with Whitelist
      • manage the whitelist
    • A Challenger - acting directly

    Participants (5):

    0xC7F8…23F20xbA43…68C70x59C0…d0E50x05e1…21360xcE72…b9f0
    Morph Multisig 1 0xF101…D887

    A Multisig with 4/6 threshold.

    • Can upgrade with no delay
      • L1Staking
      • L1ETHGateway
      • L1MessageQueueWithGasPriceOracle
      • L1StandardERC20Gateway
      • L1GatewayRouter
      • Rollup
      • EnforcedTxGateway
      • L1CrossDomainMessenger

    Participants (6):

    0x05e1…21360x59C0…d0E50xe72B…F54C0x27f0…E9C80xC7F8…23F20xbA43…68C7
    EOA 1, EOA 2, EOA 3, EOA 4, EOA 5, EOA 6, EOA 8, EOA 9, EOA 10, EOA 11, EOA 13, EOA 14, EOA 15, EOA 16, EOA 18, EOA 19, EOA 20, EOA 21, EOA 22, EOA 23, EOA 24, EOA 25, EOA 26, EOA 27, EOA 28, EOA 30, EOA 31, EOA 32, EOA 33, EOA 34, EOA 35, EOA 36, EOA 37, EOA 38, EOA 40, EOA 41 and EOA 42 (37) 0x0092…B97D0x03FD…B0FA0x111B…AEC50x1721…00c60x234a…e1D00x323a…09830x3b06…d57b0x4Ee3…a47C0x5c6E…ee7e0x611e…d6Db0x6D7c…38540x71C1…564F0x731a…C1be0x7420…a0910x77B2…8cE10x8b8b…b13e0x8C0c…17Cd0x92C4…10Bb0x9541…b8320x95C3…97380x9Ac2…1b2b0xa609…14970xAa54…b4420xB2e5…61840xb4A2…eAB60xbD9f…0Bab0xbfd6…4b4C0xC412…68110xC4db…5Bb30xc8F7…fcF80xcA00…E4D00xd11f…87720xDF06…72720xE48e…6bFe0xF2FF…C3070xf50A…d2B90xF6Ee…60Fd
    • A Challenger - acting directly
    EOA 7, EOA 12, EOA 17, EOA 29 and EOA 39 (5) 0x34E3…97960x6aB0…84A00x76F9…35f40xBBA3…1C800xf0e1…b7e4
    Smart contracts
    A dashboard to explore contracts and permissions
    Go to Disco
    Disco UI Banner
    Disco UI BannerExplore in Disco
    A diagram of the smart contract architecture
    A diagram of the smart contract architecture

    Ethereum

    ZkEvmVerifierV1 0x045d…0423

    A snark verifier based on SP1 by Succinct. It verifies RISC-V execution in a PLONK proof. Used to verify the validity of L2 state transitions for single round fraud proofs.

    L1ETHGateway 0x1C1F…DE68Implementation (Upgradable)Admin

    Contract used to bridge ETH from L1 to L2.

    • Roles:
      • admin: ProxyAdmin; ultimately Morph Multisig 1
    Can be upgraded by:
    Morph Multisig 1 with no delay
    ProxyAdmin 0x3111…16A0
    • Roles:
      • owner: Morph Multisig 1
    L1MessageQueueWithGasPriceOracle 0x3931…C1EFImplementation (Upgradable)Admin

    Contains the array of queued L1 -> L2 messages, either appended using the L1Messenger or the EnforcedTxGateway.

    • Roles:
      • admin: ProxyAdmin; ultimately Morph Multisig 1
    Can be upgraded by:
    Morph Multisig 1 with no delay
    L1StandardERC20Gateway 0x44c2…2Bd8Implementation (Upgradable)Admin

    Contract used to bridge ERC20 tokens from L1 to L2. It uses a fixed token list.

    • Roles:
      • admin: ProxyAdmin; ultimately Morph Multisig 1
    • This contract can store any token.
    Can be upgraded by:
    Morph Multisig 1 with no delay
    MultipleVersionRollupVerifier 0x5d15…0EC1

    Used to update the verifier and keep track of current and old versions. Routes to a registered verifier by batch index, so that every batch is verified by the latest verifier that is enabled for this batch.

    • Roles:
      • owner: Morph Multisig 2
    L1GatewayRouter 0x7497…8A8aImplementation (Upgradable)Admin

    Main entrypoint for depositing ETH and ERC20 tokens, which are then forwarded to the correct escrow.

    • Roles:
      • admin: ProxyAdmin; ultimately Morph Multisig 1
      • owner: Morph Multisig 2
    Can be upgraded by:
    Morph Multisig 1 with no delay
    Rollup 0x7598…eF60Implementation (Upgradable)Admin

    The main contract of the Morph rollup. Allows to post transaction data and state roots and implements the challenge mechanism along with the proof system. Sequencing and proposing are behind a whitelist.

    • Roles:
      • admin: ProxyAdmin; ultimately Morph Multisig 1
      • challengers: EOA 1, EOA 10, EOA 11, EOA 13, EOA 14, EOA 15, EOA 16, EOA 18, EOA 19, EOA 2, EOA 20, EOA 21, EOA 22, EOA 23, EOA 24, EOA 25, EOA 26, EOA 27, EOA 28, EOA 3, EOA 30, EOA 31, EOA 32, EOA 33, EOA 34, EOA 35, EOA 36, EOA 37, EOA 38, EOA 4, EOA 40, EOA 41, EOA 42, EOA 5, EOA 6, EOA 8, EOA 9, Morph Multisig 2
      • owner: Morph Multisig 2
    Can be upgraded by:
    Morph Multisig 1 with no delay
    EnforcedTxGateway 0xc5Fa…abb7Implementation (Upgradable)Admin

    Contracts to force L1 -> L2 messages with the L1 sender. Currently paused: true.

    • Roles:
      • admin: ProxyAdmin; ultimately Morph Multisig 1
      • owner: Morph Multisig 2
    Can be upgraded by:
    Morph Multisig 1 with no delay
    L1CrossDomainMessenger 0xDc71…3304Implementation (Upgradable)Admin

    Contract used to send L1 -> L2 and relay messages from L2. It allows to replay failed messages and to drop skipped messages. L1 -> L2 messages sent using this contract pay for L2 gas on L1 and will have the aliased address of this contract as the sender.

    • Roles:
      • admin: ProxyAdmin; ultimately Morph Multisig 1
    • This contract stores the following tokens: ETH.
    Can be upgraded by:
    Morph Multisig 1 with no delay
    Whitelist 0xFFaf…6984

    Generic whitelist. Currently used to whitelist addresses that can send or relay messages to/from L2 without paying for L2 gas.

    • Roles:
      • owner: Morph Multisig 2
      • whitelisted: L1Staking

    The current deployment carries some associated risks:

    • Funds can be stolen if a contract receives a malicious code upgrade. There is no delay on code upgrades (CRITICAL).

    Program Hashes

    Name
    Hash
    Repository
    Verification
    Used in
    0x0059...8d7e
    		Code unknown
    None