Get the Crypto Payment Security & Compliance Playbook
Back to Blog

Building a Secure Stablecoin Payment Network: BlockSec Partners with Morph

Code Auditing
March 18, 2026
3 min read
Key Insights

  • BlockSec partners with Morph as official audit partner in the $150M Morph Payment Accelerator to deliver institutional-grade security for global stablecoin payments.

  • Coverage includes smart contract audits, infrastructure audits, and penetration testing.

BlockSec and Morph join forces to establish a secure, institutional-grade foundation for global stablecoin payments, bringing top-tier security infrastructure to the Morph Payment Accelerator.

BlockSec is thrilled to announce our partnership with Morph as an official audit partner for the Morph Payment Accelerator. As payment companies and financial institutions increasingly transition to onchain settlement, the infrastructure supporting these massive capital flows must be bulletproof. Real volume and real user funds demand real security.

That is why we are excited to announce our strategic partnership with Morph. By joining the $150 million Morph Payment Accelerator as an official audit partner, BlockSec is bringing institutional-grade security to the forefront of the stablecoin payment ecosystem.

Best Security Auditor for Web3

Validate design, code, and business logic before launch

Read Audit ReportsRequest an Audit

Covering smart contact audit, infrastructure audit and pentesting

Securing the Builders in the Morph Ecosystem

Payment projects building on Morph handle real user funds at scale. Whether it is a crypto card issuer, a cross-border remittance platform, or a merchant payment gateway, every product in the Morph ecosystem carries the same responsibility: keeping funds safe from the moment a contract is deployed to the moment a transaction settles.

BlockSec's role in this partnership is straightforward: serve as the security layer for payment builders in the Morph ecosystem. We work directly with these projects to identify vulnerabilities before they go live, stress-test their infrastructure against real-world attack scenarios, and monitor their systems continuously after launch.

Our goal is simple—give every payment team building on Morph the confidence to ship fast, knowing security is covered.

Empowering the Morph Payment Accelerator

The Morph Payment Accelerator is designed to incentivize meaningful, onchain stablecoin payment activity. To support this mission and lower the barrier to enterprise-grade security, BlockSec is offering a 20% discount on audit services exclusively for Payment Accelerator participants.

By integrating BlockSec's expertise, payment platforms building on Morph gain access to:

  • Smart Contract Audits: Rigorous, proactive code reviews to eliminate vulnerabilities before products go live.
  • Penetration Testing: Advanced simulations of real-world attacks to ensure infrastructure resilience against sophisticated threats.

This partnership allows payment teams to focus on what they do best—building innovative products and expanding distribution—while we handle the complex underlying security infrastructure.

Scaling Secure Onchain Commerce

As stablecoin activity moves from early adoption to sustained, institutional usage, collaboration across the ecosystem is more important than ever. Morph and BlockSec share a unified vision: building a payment infrastructure that can operate at a global scale without ever compromising on security.

We are proud to work alongside Morph to set a new standard for secure onchain payments. As the Morph ecosystem grows, our commitment to security will serve as a competitive advantage for every project building within the network.

Eligible projects in the Morph Payment Accelerator can reach out to us directly to claim their exclusive discount and begin the audit process.

About BlockSec

BlockSec is a full-stack blockchain security and crypto compliance provider. We build products and services that help customers to perform code audit (including smart contracts, blockchain and wallets), intercept attacks in real time, analyze incidents, trace illicit funds, and meet AML/CFT obligations, across the full lifecycle of protocols and platforms.

BlockSec has published multiple blockchain security papers in prestigious conferences, reported several zero-day attacks of DeFi applications, blocked multiple hacks to rescue more than 20 million dollars, and secured billions of cryptocurrencies.

Visit BlockSec | Read the Morph Announcement

Ready to secure your payment infrastructure? Contact us today to get started.

Sign up for the latest updates
~$320M Lost: Liquid Network, Symbiosis Exploits | BlockSec
Security Insights

~$320M Lost: Liquid Network, Symbiosis Exploits | BlockSec

This report, covering 2026/09/07 - 2026/09/13, examines two security incidents that caused approximately $320M in losses, including the Liquid Network exploit of 2026/09/06 that the previous report did not cover. The larger was that Liquid Network exploit, where the rangeproof validation cache in Elements derived its key by hashing four fields — two of them variable in length — concatenated with nothing marking the boundaries between them, so a verdict recorded for one output was returned for another whose proof was never examined, letting the attacker create 4,000 unbacked L-BTC and peg out nearly all of them as bitcoin. On the Bitcoin route of the Symbiosis cross-chain bridge, spanning BNB Smart Chain, Ethereum and Rootstock, off-chain code that reads Bitcoin deposits took the depositor's identity from a field the depositor controls and then subtracted its fee from the deposit without checking whether the fee itself was negative, letting a 330-satoshi deposit mint `46,116,860,184.27388234 syBTC`; the pools it had to be sold through held only 11.26 syBTC, so the loss to liquidity providers and users came to an estimated 9.97 BTC (~$770K).

~$9.4M Lost: Injective, Aquifer Exploits | BlockSec Weekly
Security Insights

~$9.4M Lost: Injective, Aquifer Exploits | BlockSec Weekly

During the past week (2026/08/31 - 2026/09/06), four security incidents caused approximately $9.4M in losses across Injective, Solana, Ethereum, and Flow EVM. The largest was the Injective exploit, where an insurance fund identifier collided with a binary options market identifier and the settlement path never compared their denominations, draining about $4.8M; Aquifer on Solana lost about $2.47M because its swap path invoked an unvalidated caller-supplied Token Program, and Notional Finance V1 on Ethereum lost about $1.73M to an unchecked `uint128` cast that valued a debt at zero. Ankr FLOW on Flow EVM closed out the week with about $410K drained through a staking entry point that skipped its pause guard and minted against a stale ratio.

From Incidents to Regulation: Why Crypto Institutions Need Blockchain Penetration Testing
Security Services

From Incidents to Regulation: Why Crypto Institutions Need Blockchain Penetration Testing

Exchanges, payment firms, custodians, and wallet providers now lose the most money beyond the smart contract—in signing, custody, keys, people, and supply chains. Code-level audit and transaction-level monitoring each leave a gap, and traditional penetration tests may miss crypto's signing and fund semantics. This article opens our blockchain penetration testing series with the two legs of the case for institutions in scope: where the risk actually comes from, and how NYDFS, DORA, VARA, SFC, and MAS treat adversarial testing across five jurisdictions.

Best Security Auditor for Web3

Validate design, code, and business logic before launch. Aligned with the highest industry security standards.

BlockSec Audit