Goal:
Create an example repo from an existing codebase for fuzzing with Medusa/Echidna using Recon.
Steps:
- Forked the Morpho Blue codebase at the state of the Cantina competition.
- Added Recon-Fuzz/chimera and Recon generated boilerplate contracts.
- Implemented setup routine for
Morphocontract and restrainedTargetMethodsfor fuzzing. - Implemented a simple example property that "breaks" once
medusa fuzzhas found a way to supply collateral tokens, supply loan tokens and successfully borrow them. - Implemented an assertion test that fails once Medusa finds a case where no interest was accrued although interest should have been accrued for a market.
All the above steps and involved problems can be seen in the commit history.
Result:
Recon reduced the entry barrier for building a fuzzing test and the example property and assertion test were sucessfully broken.
This serves as a basis for more advanced fuzzing tests.
Morpho Blue is a noncustodial lending protocol implemented for the Ethereum Virtual Machine. Morpho Blue offers a new trustless primitive with increased efficiency and flexibility compared to existing lending platforms. It provides permissionless risk management and permissionless market creation with oracle agnostic pricing. It also enables higher collateralization factors, improved interest rates, and lower gas consumption. The protocol is designed to be a simple, immutable, and governance-minimized base layer that allows for a wide variety of other layers to be built on top. Morpho Blue also offers a convenient developer experience with a singleton implementation, callbacks, free flash loans, and account management features.
The protocol is described in detail in the Morpho Blue Whitepaper.
Morpho.sol contains most of the source code of the core contract of Morpho Blue.
It solely relies on internal libraries in the src/libraries subdirectory.
Libraries in the src/libraries/periphery directory are not used by Morpho Blue.
They are useful helpers that integrators can reuse or adapt to their own needs.
The src/mocks directory contains contracts designed exclusively for testing.
You'll find relevant comments in IMorpho.sol, notably a list of requirements about market dependencies.
Install dependencies: yarn
Run forge tests: yarn test:forge
Run hardhat tests: yarn test:hardhat
You will find other useful commands in the package.json file.
All audits are stored in the audits' folder.
The primary license for Morpho Blue is the Business Source License 1.1 (BUSL-1.1), see LICENSE.
However, all files in the following folders can also be licensed under GPL-2.0-or-later (as indicated in their SPDX headers): src/interfaces, src/libraries, src/mocks, test.