Get the Crypto Payment Security & Compliance Playbook
Back to Blog

Building a Secure Stablecoin Payment Network: BlockSec Partners with Morph

Code Auditing
March 18, 2026
3 min read
Key Insights

  • BlockSec partners with Morph as official audit partner in the $150M Morph Payment Accelerator to deliver institutional-grade security for global stablecoin payments.

  • Coverage includes smart contract audits, infrastructure audits, and penetration testing.

BlockSec and Morph join forces to establish a secure, institutional-grade foundation for global stablecoin payments, bringing top-tier security infrastructure to the Morph Payment Accelerator.

BlockSec is thrilled to announce our partnership with Morph as an official audit partner for the Morph Payment Accelerator. As payment companies and financial institutions increasingly transition to onchain settlement, the infrastructure supporting these massive capital flows must be bulletproof. Real volume and real user funds demand real security.

That is why we are excited to announce our strategic partnership with Morph. By joining the $150 million Morph Payment Accelerator as an official audit partner, BlockSec is bringing institutional-grade security to the forefront of the stablecoin payment ecosystem.

Best Security Auditor for Web3

Validate design, code, and business logic before launch

Read Audit ReportsRequest an Audit

Covering smart contact audit, infrastructure audit and pentesting

Securing the Builders in the Morph Ecosystem

Payment projects building on Morph handle real user funds at scale. Whether it is a crypto card issuer, a cross-border remittance platform, or a merchant payment gateway, every product in the Morph ecosystem carries the same responsibility: keeping funds safe from the moment a contract is deployed to the moment a transaction settles.

BlockSec's role in this partnership is straightforward: serve as the security layer for payment builders in the Morph ecosystem. We work directly with these projects to identify vulnerabilities before they go live, stress-test their infrastructure against real-world attack scenarios, and monitor their systems continuously after launch.

Our goal is simple—give every payment team building on Morph the confidence to ship fast, knowing security is covered.

Empowering the Morph Payment Accelerator

The Morph Payment Accelerator is designed to incentivize meaningful, onchain stablecoin payment activity. To support this mission and lower the barrier to enterprise-grade security, BlockSec is offering a 20% discount on audit services exclusively for Payment Accelerator participants.

By integrating BlockSec's expertise, payment platforms building on Morph gain access to:

  • Smart Contract Audits: Rigorous, proactive code reviews to eliminate vulnerabilities before products go live.
  • Penetration Testing: Advanced simulations of real-world attacks to ensure infrastructure resilience against sophisticated threats.

This partnership allows payment teams to focus on what they do best—building innovative products and expanding distribution—while we handle the complex underlying security infrastructure.

Scaling Secure Onchain Commerce

As stablecoin activity moves from early adoption to sustained, institutional usage, collaboration across the ecosystem is more important than ever. Morph and BlockSec share a unified vision: building a payment infrastructure that can operate at a global scale without ever compromising on security.

We are proud to work alongside Morph to set a new standard for secure onchain payments. As the Morph ecosystem grows, our commitment to security will serve as a competitive advantage for every project building within the network.

Eligible projects in the Morph Payment Accelerator can reach out to us directly to claim their exclusive discount and begin the audit process.

About BlockSec

BlockSec is a full-stack blockchain security and crypto compliance provider. We build products and services that help customers to perform code audit (including smart contracts, blockchain and wallets), intercept attacks in real time, analyze incidents, trace illicit funds, and meet AML/CFT obligations, across the full lifecycle of protocols and platforms.

BlockSec has published multiple blockchain security papers in prestigious conferences, reported several zero-day attacks of DeFi applications, blocked multiple hacks to rescue more than 20 million dollars, and secured billions of cryptocurrencies.

Visit BlockSec | Read the Morph Announcement

Ready to secure your payment infrastructure? Contact us today to get started.

Sign up for the latest updates
Bitget's $387.5M Off-Chain Breach: Beyond Keys and Contracts
Security Insights

Bitget's $387.5M Off-Chain Breach: Beyond Keys and Contracts

On September 24, 2026, attackers exploited a vulnerability in a third-party security product, obtained internal credentials, and forged withdrawal commands. The resulting transfers moved approximately $387.5M from some of Bitget's operational wallets across Ethereum, other EVM networks, XRP Ledger, Zcash, and TRON; private keys and cold wallets remained intact. This deep dive summarizes the disclosed incident path and fund flow, examines rapid conversion into native assets and the ecosystem recovery response, proposes a systematic defense-in-depth framework for institutions, and explains how authorized blockchain penetration testing can validate cross-layer assumptions.

~$11.3M Lost: Multicall Router, Nostra | BlockSec Weekly
Security Insights

~$11.3M Lost: Multicall Router, Nostra | BlockSec Weekly

This report, covering 2026/09/14 - 2026/09/20, examines two security incidents with approximately $11.3M in combined losses, on Ethereum and Starknet. In the larger one, a multicall router accepted its own address as a dispatch target, so the nested call reached the Gateway module of a Safe wallet carrying the router's own already-authorized identity instead of the external caller's, and roughly 2,900 `aEthrsETH` was routed out of that wallet into an attacker-created Uniswap v4 pool. On Starknet, Nostra's oracle integration required a minimum of only one aggregated source, so when only two of the three configured price sources reached the aggregation, a manipulated thin-pool quote averaged with a normal quote to value `NSTR` at roughly $49.52, supporting approximately $3.5M of borrowing against overvalued collateral.

~$320M Lost: Liquid Network, Symbiosis Exploits | BlockSec
Security Insights

~$320M Lost: Liquid Network, Symbiosis Exploits | BlockSec

This report, covering 2026/09/07 - 2026/09/13, examines two security incidents that caused approximately $320M in losses, including the Liquid Network exploit of 2026/09/06 that the previous report did not cover. The larger was that Liquid Network exploit, where the rangeproof validation cache in Elements derived its key by hashing four fields — two of them variable in length — concatenated with nothing marking the boundaries between them, so a verdict recorded for one output was returned for another whose proof was never examined, letting the attacker create 4,000 unbacked L-BTC and peg out nearly all of them as bitcoin. On the Bitcoin route of the Symbiosis cross-chain bridge, spanning BNB Smart Chain, Ethereum and Rootstock, off-chain code that reads Bitcoin deposits took the depositor's identity from a field the depositor controls and then subtracted its fee from the deposit without checking whether the fee itself was negative, letting a 330-satoshi deposit mint `46,116,860,184.27388234 syBTC`; the pools it had to be sold through held only 11.26 syBTC, so the loss to liquidity providers and users came to an estimated 9.97 BTC (~$770K).

Best Security Auditor for Web3

Validate design, code, and business logic before launch. Aligned with the highest industry security standards.

BlockSec Audit