Summary Value Secured Activity Data posted Risk summary Risk analysis Rollup stage Data availability State validation Upgrades & Governance Operator Withdrawals Permissions Smart contracts

Morph

Badges

About

Morph is an EVM compatible rollup. It operates as an optimistic rollup with ZK fault proofs and has plans for decentralizing the Sequencer. Their mission is to build the first blockchain for consumers, where user-friendly applications integrate seamlessly... into everyday life, becoming indispensable utilities.

Total Value SecuredTVS

$20.51 M2.29%

Past day UOPSDaily UOPS

0.0449.0%

Stage

Gas token

ETH

Type

Optimistic Rollup

Purpose

Universal

Chain ID

2818

Tokens breakdown

Value secured breakdown

View TVS breakdown

Sequencer failureState validationData availabilityExit windowProposer failure

Explore more in Discovery UI

Badges

About

Value Secured View TVS breakdown

Exclude restricted RWA tokens

Total

Canonically BridgedCanonically Bridged ValueCanonical

Natively MintedNatively Minted TokensNative

Externally BridgedExternally Bridged ValueExternal

ETH & derivatives

Stablecoins

BTC & derivatives

Other

View TVS breakdown

Activity

2025 Mar 28 — 2026 Mar 28

Past Day UOPS

0.04

Past Day Ops count

3.40 K

Max. UOPS

12.44

2025 Aug 09

Past day UOPS/TPS Ratio

1.00

Data posted

This section shows how much data the project publishes to its data-availability (DA) layer over time. The project currently posts data toEthereum.

2025 Mar 28 — 2026 Mar 28

Data posted

3.75 GiB

Avg size per day

10.50 MiB

Avg size per L2 UOP

137.75 B

Risk summary

Funds can be stolen if

a contract receives a malicious code upgrade. There is no delay on code upgrades (CRITICAL),
no whitelisted challenger posts a challenge for an incorrect state root.

MEV can be extracted if

the operator exploits their centralized position and frontruns user transactions.

Risk analysis

Sequencer failureState validationData availabilityExit windowProposer failure

Sequencer failure

Force via L1

Users can force the sequencer to include a transaction by submitting a request through L1. If the sequencer censors or is down for 7d, new L1 batches must include at least 1 transaction from the queue.

State validation

Fraud proofs (1R, ZK)

Fraud proofs allow actors watching the chain to prove that the state is incorrect. Single round proofs (1R) only require a single transaction to resolve. ZK proofs are used to prove the correctness of the state transition. The system currently operates with at least 5 whitelisted challengers external to the team.

Data availability

Onchain

All of the data needed for proof construction is published on Ethereum L1.

Exit window

None

There is no window for users to exit in case of an unwanted regular upgrade since contracts are instantly upgradable.

Proposer failure

Self propose

Anyone can become a Proposer after 7d of inactivity from the currently whitelisted Proposers. This requires using the source-available prover to submit a zk proof of validity for the proposal.

Rollup stage

Morph is a

Stage 0

Optimistic Rollup.

Learn more about Rollup stages

Please keep in mind that these stages do not reflect rollup security, this is an opinionated assessment of rollup maturity based on subjective criteria, created with a goal of incentivizing projects to push toward better decentralization. Each team may have taken different paths to achieve this goal.

Data availability

All data required for proofs is published on chain

All the data that is used to construct the system state is published on chain in the form of cheap blobs or calldata. This ensures that it will be available for enough time.

Rollup.sol - Etherscan source code commitBatch() and commitBatchWithBlobProof() functions

Learn more about the DA layer here:

Ethereum

State validation

Fraud proofs

Morph uses a one round fault proof system where whitelisted Challengers, if they find a faulty state root within the 2d challenge window, can post a 1 WEI bond and request a ZK proof of the state transition. At least 5 Challengers are operated by entities external to the team. After the challenge, during a 3d proving window, a ZK proof must be delivered, otherwise the state root is considered invalid and the root proposer bond, which is currently set to 1 ETH, is slashed. The zkVM used is SP1 by Succinct. If a valid proof is delivered, the Challenger loses the challenge bond. The Morph Multisig can revert unfinalized batches.

Funds can be stolen if no whitelisted challenger posts a challenge for an incorrect state root.

Program Hashes

Name	Hash	Repository	Verification	Used in

	0x00ad...e13d	Github
	0x0059...8d7e	Github

Upgrades & Governance

Past upgrades

The metrics include upgrades on the currently used proxy contracts. Historical proxy contracts and changes of such are not included.

Count of upgrades

Last upgrade

2d 11h ago

Avg upgrade interval

5mo 3d

Operator

Decentralised sequencer network

BLS signatures of the Sequencers are not verified onchain. Sequencing is centralized an permissioned to the listed sequencers in practice.

MEV can be extracted if the operator exploits their centralized position and frontruns user transactions.

L1Staking.sol - Etherscan source code, verifySignature() stub

Users can force transactions

Users can force the sequencer to include a transaction by submitting a request through L1. If the sequencer censors such a request or is down for 7d, any new proposal must include at least 1 transaction from the queue. Proposing is permissionless under these conditions if proven immediately.

Withdrawals

Regular messaging

The user initiates L2->L1 messages by submitting a regular transaction on this chain. When the block containing that transaction is settled, the message becomes available for processing on L1. The process of block finalization takes a challenge period of 2d to complete.

L1ETHGateway.sol - Etherscan source code, finalizeWithdrawETH function

Permissions

A dashboard to explore contracts and permissions

Go to Disco

Explore in Disco

Ethereum

Roles:

Challenger (38)Morph Multisig 2 EOA 1 EOA 2 EOA 3 EOA 4 EOA 5 EOA 6 EOA 8 EOA 9 EOA 10 EOA 11 EOA 13 EOA 14 EOA 15 EOA 16 EOA 18 EOA 19 EOA 20 EOA 21 EOA 22 EOA 23 EOA 24 EOA 25 EOA 26 EOA 27 EOA 28 EOA 30 EOA 31 EOA 32 EOA 33 EOA 34 EOA 35 EOA 36 EOA 37 EOA 38 EOA 40 EOA 41 EOA 42

Allowed to challenge or delete state roots proposed by a Proposer.

Sequencer (5)EOA 7 EOA 12 EOA 17 EOA 29 EOA 39

Actors allowed to commit transaction batches and propose and prove state roots

Actors:

L1Staking0x0Dc4…43F7

Contract keeping track of stakers which act as sequencers/proposes. It is responsible for staker registration and withdrawals and for verifying BLS signatures of stakers (currently not implemented).

Can interact with Whitelist
- can send gasless transactions to L2 (L2 gas fee waived)

Morph Multisig 20xB822…4377

A Multisig with 3/5 threshold.

Can interact with L1Staking
- whitelist stakers (sequencer/proposer), remove stakers, manage staking and slashing amount and reward config
Can interact with TimelockController
- cancel queued transactions
- propose transactions
Can interact with MultipleVersionRollupVerifier
- register new verifiers to be used starting from a given L2 batch index
Can interact with L1GatewayRouter
- manage token to escrow mapping and (un-)register escrows
Can interact with Rollup
- can pause and unpause, revert unfinalized batches, update proof window and finalization period, manage challengers, modify the verifier address
Can interact with EnforcedTxGateway
- pause and unpause, update the fee vault
Can interact with Whitelist
- manage the whitelist
A Challenger - acting directly

Participants (5):

0xC7F8…23F2 0xbA43…68C7 0x59C0…d0E5 0x05e1…2136 0xcE72…b9f0

Morph Multisig 10xF101…D887

A Multisig with 4/6 threshold.

Can upgrade with no delay
- L1Staking TimelockController → ProxyAdmin
- L1ETHGateway TimelockController → ProxyAdmin
- L1MessageQueueWithGasPriceOracle TimelockController → ProxyAdmin
- L1StandardERC20Gateway TimelockController → ProxyAdmin
- TimelockController ProxyAdmin
- L1GatewayRouter TimelockController → ProxyAdmin
- Rollup TimelockController → ProxyAdmin
- EnforcedTxGateway TimelockController → ProxyAdmin
- L1CrossDomainMessenger TimelockController → ProxyAdmin
Can interact with TimelockController
- execute transactions that are ready
- manage all access control roles TimelockController - or - acting directly

Participants (6):

0x05e1…2136 0x59C0…d0E5 0xe72B…F54C 0x27f0…E9C8 0xC7F8…23F2 0xbA43…68C7

EOA 1, EOA 2, EOA 3, EOA 4, EOA 5, EOA 6, EOA 8, EOA 9, EOA 10, EOA 11, EOA 13, EOA 14, EOA 15, EOA 16, EOA 18, EOA 19, EOA 20, EOA 21, EOA 22, EOA 23, EOA 24, EOA 25, EOA 26, EOA 27, EOA 28, EOA 30, EOA 31, EOA 32, EOA 33, EOA 34, EOA 35, EOA 36, EOA 37, EOA 38, EOA 40, EOA 41 and EOA 42 (37)0x0092…B97D 0x03FD…B0FA 0x111B…AEC5 0x1721…00c6 0x234a…e1D0 0x323a…0983 0x3b06…d57b 0x4Ee3…a47C 0x5c6E…ee7e 0x611e…d6Db 0x6D7c…3854 0x71C1…564F 0x731a…C1be 0x7420…a091 0x77B2…8cE1 0x8b8b…b13e 0x8C0c…17Cd 0x92C4…10Bb 0x9541…b832 0x95C3…9738 0x9Ac2…1b2b 0xa609…1497 0xAa54…b442 0xB2e5…6184 0xb4A2…eAB6 0xbD9f…0Bab 0xbfd6…4b4C 0xC412…6811 0xC4db…5Bb3 0xc8F7…fcF8 0xcA00…E4D0 0xd11f…8772 0xDF06…7272 0xE48e…6bFe 0xF2FF…C307 0xf50A…d2B9 0xF6Ee…60Fd

A Challenger - acting directly

EOA 7, EOA 12, EOA 17, EOA 29 and EOA 39 (5)0x34E3…9796 0x6aB0…84A0 0x76F9…35f4 0xBBA3…1C80 0xf0e1…b7e4

A Sequencer - acting directly

Smart contracts

A dashboard to explore contracts and permissions

Go to Disco

Explore in Disco

A diagram of the smart contract architecture

Ethereum

ZkEvmVerifierV10x045d…0423

A snark verifier based on SP1 by Succinct. It verifies RISC-V execution in a PLONK proof. Used to verify the validity of L2 state transitions for single round fraud proofs.

L1ETHGateway0x1C1F…DE68 Implementation (Upgradable)Admin

Contract used to bridge ETH from L1 to L2.

Roles:
- admin: ProxyAdmin; ultimately Morph Multisig 1

Can be upgraded by:

Morph Multisig 1 with no delay

ProxyAdmin0x3111…16A0

Roles:
- owner: TimelockController

L1MessageQueueWithGasPriceOracle0x3931…C1EF Implementation (Upgradable)Admin

Contains the array of queued L1 -> L2 messages, either appended using the L1Messenger or the EnforcedTxGateway.

Roles:
- admin: ProxyAdmin; ultimately Morph Multisig 1

Can be upgraded by:

Morph Multisig 1 with no delay

L1StandardERC20Gateway0x44c2…2Bd8 Implementation (Upgradable)Admin

Contract used to bridge ERC20 tokens from L1 to L2. It uses a fixed token list.

Roles:
- admin: ProxyAdmin; ultimately Morph Multisig 1

Can be upgraded by:

Morph Multisig 1 with no delay

TimelockController0x5426…B530 Implementation (Upgradable)Admin

A timelock with access control. The current minimum delay is 0s.

Roles:
- admin: ProxyAdmin; ultimately Morph Multisig 1
- canceller: Morph Multisig 2
- defaultAdmin: Morph Multisig 1, TimelockController; ultimately Morph Multisig 1
- executor: Morph Multisig 1
- proposer: Morph Multisig 2

Can be upgraded by:

Morph Multisig 1 with no delay

MultipleVersionRollupVerifier0x5d15…0EC1

Used to update the verifier and keep track of current and old versions. Routes to a registered verifier by batch index, so that every batch is verified by the latest verifier that is enabled for this batch.

Roles:
- owner: Morph Multisig 2

ZkEvmVerifierV10x5ff1…2d70

A snark verifier based on SP1 by Succinct. It verifies RISC-V execution in a PLONK proof. Used to verify the validity of L2 state transitions for single round fraud proofs.

L1GatewayRouter0x7497…8A8a Implementation (Upgradable)Admin

Main entrypoint for depositing ETH and ERC20 tokens, which are then forwarded to the correct escrow.

Roles:
- admin: ProxyAdmin; ultimately Morph Multisig 1
- owner: Morph Multisig 2

Can be upgraded by:

Morph Multisig 1 with no delay

Rollup0x7598…eF60 Implementation (Upgradable)Admin

The main contract of the Morph rollup. Allows to post transaction data and state roots and implements the the proof system. Sequencing and proposing are behind a whitelist. If the EnforcedTxGateway is not paused, any sequencer must include at least one L1 -> L2 message in their proposal if the oldest message is > 7d old. If the Sequencers are censoring or down for more than 7d, users can permissionlessly propose and prove via commitBatchWithProof().

Roles:
- admin: ProxyAdmin; ultimately Morph Multisig 1
- challengers: EOA 1, EOA 10, EOA 11, EOA 13, EOA 14, EOA 15, EOA 16, EOA 18, EOA 19, EOA 2, EOA 20, EOA 21, EOA 22, EOA 23, EOA 24, EOA 25, EOA 26, EOA 27, EOA 28, EOA 3, EOA 30, EOA 31, EOA 32, EOA 33, EOA 34, EOA 35, EOA 36, EOA 37, EOA 38, EOA 4, EOA 40, EOA 41, EOA 42, EOA 5, EOA 6, EOA 8, EOA 9, Morph Multisig 2
- owner: Morph Multisig 2

Can be upgraded by:

Morph Multisig 1 with no delay

ProxyAdmin0x8654…Ec17

Roles:
- owner: Morph Multisig 1

EnforcedTxGateway0xc5Fa…abb7 Implementation (Upgradable)Admin

Contracts to force L1 -> L2 messages with the L1 sender. Currently paused: false.

Roles:
- admin: ProxyAdmin; ultimately Morph Multisig 1
- owner: Morph Multisig 2

Can be upgraded by:

Morph Multisig 1 with no delay

L1CrossDomainMessenger0xDc71…3304 Implementation (Upgradable)Admin

Contract used to send L1 -> L2 and relay messages from L2. It allows to replay failed messages and to drop skipped messages. L1 -> L2 messages sent using this contract pay for L2 gas on L1 and will have the aliased address of this contract as the sender.