When the timelock waiting period is too short, curators can quickly increase risks concentrated in four areas: expansion of risk exposure limits, rapid changes to permission structures, sudden shrinkage of compliance boundaries, and unilateral increases of fee structures. These four types of actions can all be executed by shortening the timelock to compress depositors' reaction window.
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！
The core purpose of a timelock is to give depositors and security roles (Sentinel/Guardian) a time window to "see the change and decide whether to withdraw funds." If this window is compressed too short, curators can push the vault's risk appetite a big step forward before depositors can react.
Step 1: Check if the curator can quickly increase risk exposure
Verify whether the current timelock can limit the curator from quickly increasing supply caps and enabling new markets. Check the timelock duration for increaseAbsoluteCap and increaseRelativeCap in the Vault V2 configuration. If a risk ID's timelock is set to 0 or extremely short, the curator can instantly expand the vault's allocation cap to that market.
Completion standard: You have confirmed the waiting time needed for the curator to expand risk exposure, and whether that time is sufficient for you to complete a withdrawal.
Risk reminder: According to Morpho's official documentation, risk-reducing operations (such as lowering supply caps) take effect immediately, but risk-increasing operations (such as raising caps, enabling new adapters) are protected by a timelock. If the curator sets a very short timelock for "raising caps," they could quickly pull back the cap after risk exposure, but losses incurred before the pullback may already be reflected in the share price.
Step 2: Check if the curator can quickly change the permission structure
Confirm whether the curator can replace the Allocator or set a Gate contract within a short timelock. In V2 vaults, setIsAllocator (add or remove allocators) and setReceiveSharesGate (set a gate for deposits/withdrawals) are timelock-protected operations. However, the curator can actively shorten the timelock for these operations — once the waiting period for decreaseTimelock has passed, they can reduce the timelock for any protected operation to any short length.
Completion standard: You have confirmed the time needed for the curator to change the permission structure, and whether a Sentinel can revoke these changes.
Step 3: Check if the curator can suddenly lock your funds via a Gate
Confirm whether the timelock prevents the curator from suddenly setting or replacing a deposit/withdrawal gate. A Gate is a contract in V2 vaults used to restrict who can deposit or withdraw funds. If the curator sets a very short timelock for setSendAssetsGate (restricting asset transfers out), they could suddenly prevent some users from withdrawing normally before depositors realize it.
Completion standard: You have confirmed the timelock length for Gate-related operations.
Step 4: Check if the curator can quickly raise fees
Confirm whether the timelock prevents the curator from suddenly increasing management fees or performance fees. In V2 vaults, setPerformanceFee and setManagementFee are timelock-protected. But if the timelock is too short, the curator can suddenly raise fee rates without depositors noticing the announcement.
Completion standard: You have confirmed the timelock length for fee changes.
Common failure reasons
Many depositors only focus on annualized yield and never check a vault's timelock configuration. When the curator shortens the timelock for a high-risk market to 1 hour, then rapidly increases that market's supply cap within the next hour and allocates a large amount of funds, by the time you see the announcement your money is already locked inside — a 1-hour window is not enough for you to complete the entire process from spotting the change, assessing the risk, to initiating a withdrawal.
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！
Next steps
If you find a vault where the curator has configured an excessively short timelock (e.g., less than 24 hours), first check whether the Sentinel or Guardian has the ability to revoke the curator's pending proposals. In V2 vaults, the timelock's role is to allow depositors to see changes and decide whether to exit, not to prevent the change. If a vault sets the timelock for multiple high-risk operations to 0 or 1-hour levels, it indicates the vault has a low willingness to protect depositors. You should prioritize moving funds to vaults with more conservative timelock configurations.
