April 2026 was the test
When unbacked rsETH minted in the Kelp bridge exploit reached the lending markets, Morpho's exposure was roughly $1m across two isolated markets and no other vault was affected. Aave, running a shared pool, was left carrying between $177m and $236m of bad debt from the same asset. Isolation stopped being an architectural preference that day and became a measured result.
How the design works
A minimal, immutable core with markets created on top, each fixing its own loan-to-value, oracle and liquidation parameters at creation. Nothing about a live market can be changed afterwards, and a bad listing cannot reach depositors who never opted into it.
The decision that moves to you
Curators assemble vaults from markets and publish their mandates, so the risk judgement is named rather than protocol-wide. That is more honest and it means diligence now includes reading a curator, not just a protocol — a job the pooled alternatives never asked of you.
Where it sits
Rates follow each market's published model, positions are on-chain and over-collateralised, and formal verification backs the core. It is a shorter record than Aave's; it is also the architecture the sector is moving towards.
What to check before supplying
Which curator runs the vault, what its published mandate allows, and which markets it has allocated into. The protocol removed protocol-wide risk; it did not remove risk, it moved it somewhere you can read.