Before allocating vault funds to a new market, you are not betting on the curator's judgment—you are checking whether the market's underlying data is clean. Curators have incentives to allocate capital to markets that offer the highest yield or incentives, but you need to verify the safety of that market by looking at on-chain data yourself.
According to Morpho Vault's design, curators define the risk framework by enabling adapters and setting absolute and relative caps. After funds are allocated to a new market, you should at least check the following 3 on-chain data points.
Step 1: Check the Market's Bad Debt Ratio
Check if the target market has any unrecovered bad debt. You can query the market's badDebt field using the Morpho GraphQL API, or use open-source monitoring scripts from teams like Yearn to check the bad debt ratio. A bad debt ratio exceeding 0.5% is a high-risk signal, indicating that the market has already experienced borrower insolvency. You need to confirm that the market's bad debt ratio is 0 or below your risk threshold (recommended below 0.1%).
Step 2: Verify Risk Tier Matches Allocation Cap
Confirm the market's risk tier and whether the vault's current allocation to that market exceeds the cap for that tier. Query the market's classification in the Morpho risk framework (Tier 1 to Tier 5). Tier 1 markets can allocate up to 101% of assets, Tier 3 markets have a cap of 10%, and Tier 5 markets have a cap of only 1%. You need to ensure the market is at least Tier 2 (cap 30%), and that the vault's current allocation to that market does not exceed 80% of that tier's cap, leaving enough safety margin.
Risk Warning: Allocation caps are set by curators, but their due diligence process does not eliminate external dependency risks. Deep collateral due diligence needs to evaluate aspects such as minting key management, verifiability of reserve backing, and oracle behavior during depegs. In April 2026, Drift Protocol was exploited due to a similar structural vulnerability, resulting in losses of approximately $220 million to $285 million. If you find that a market's risk rating does not match the allocation proportion set by the curator, it means the vault may be taking on exposure beyond your risk tolerance.
Step 3: Confirm the Target Market's Oracle Configuration
Verify that the market's price source is reliable and has backup mechanisms. Query the market's oracle address and type via the Morpho API to confirm it uses mainstream oracles like Chainlink, RedStone, or Chronicle, rather than hardcoded or manual price feeds. Tier 5 markets often use hardcoded oracle assumptions, meaning that if the price source is wrong, liquidations and pricing will fail. You need to ensure the target market uses at least Chainlink or an equivalent mainstream oracle, and that the oracle has a 1-2% price deviation alert threshold rather than relying entirely on a single source.
Common Failure Reasons
Many depositors add more funds simply because they see a higher APY, without checking what tier the new market is. In the April 2026 Morpho vault incident, multiple vaults experienced bad debt simultaneously from the same illiquid collateral, as the curator had distributed that asset across several vaults. You were only focused on one market's APY, but the curator might have spread the same high-risk asset across seven or eight vaults—one failure could trigger a chain reaction.
Next Steps
Within 24 hours after funds are allocated to a new market, use Dune or Morpho GraphQL to query the market's total supply and utilization changes. If the market's total supply surges by more than 50% within 24 hours of allocation, it indicates that large amounts of capital are chasing the same market—this concentration itself is a risk signal. It is recommended to recheck the market's bad debt ratio and risk tier every 3-5 days, because the curator may have adjusted risk parameters during that period without you receiving a notification. If the market's risk tier is downgraded from Tier 2 to Tier 3 or lower after allocation, it means risk management teams like Gauntlet have already identified problems, and you should consider withdrawing funds.
