Morpho – Crypto Lending & Borrowing Review

Score: 69/100. Immutable core never breached across 3 incidents, but a Jun 2026 vault lost $18M to a lapsed, negligent curator.

Kamino – Crypto Lending & Borrowing Review

Score: 72.25/100. Survived two 2026 stress events with zero bad debt, per a Q2 investor report, not just its own marketing.

Compound – Crypto Lending & Borrowing Review

Score: 63.25/100. Pioneer whose 2021 self-inflicted $161.7M COMP bug remains its scar, though its caution spared it in Apr 2026.

Aave – Crypto Lending & Borrowing Review

Score: 69.5/100. Category leader hit hardest by the Apr 2026 KelpDAO crisis: $124-230M bad debt, its largest liquidity event yet.

Portals.fi – DEX Aggregator Review

Score: 66.75/100. The most technically ambitious scope here (LP tokens, vaults), with no confirmed named audit we could find.

OpenOcean – DEX Aggregator Review

Score: 65/100. Distinctive DEX+CEX liquidity, handled a small $22k hack well, but we found active impersonating domains ourselves.

Bebop – DEX Aggregator Review

Score: 68.5/100. Wintermute-incubated RFQ+JAM pricing; its own contracts are clean, but its backer’s 2022 hack forced a shutdown.

LI.FI – DEX Aggregator Review

Score: 65/100. Broadest reach (60+ chains) of any aggregator here, carrying a repeated 2022/2024 vulnerability pattern.

Matcha – DEX Aggregator Review

Score: 69.5/100. 0x’s core contracts clean since 2017, though a 2026 SwapNet incident hit users who skipped One-Time Approval.