Risk
Depositing into Bitget x Steakhouse USDC means underwriting risks you usually can't see: how much you could lose, whether you'd get out in time, and what would cover it.
Left to right, a deeper collateral crash. Hover any point for the scenarios that drive the loss — only a smart-contract bug reaches a total loss.
Collateral & oracles
Each token you're exposed to, and the market it backs. If that market breaks, this is how much the vault loses, in dollars and as a share of the vault. Open a row for the price feed, stress curve, and supply-cap detail. Below, the oracles those prices depend on and what is at stake if one is compromised.
Driven by wstETH $649,013 · weETH $44,312 · WETH $2,014 · other $2,391 · −100% $3.76m modeled all-to-zero bad-debt ceiling
wstETHMarketChainlink$3.49m79% of vault · bad debtOracle exposure $43,928$3.53m80% of vault$3.49m79% of vault$43,928separate path
wstETH uses Chainlink market-rate aggregator feed(s).
- → USDC86% LLTV0x8e02…ae31Chainlink
weETHMarketRedStone$238,1755% of vault · bad debtOracle exposure $0.17$238,1765% of vault$238,1755% of vault$0.17separate path
weETH uses RedStone market-rate aggregator feed(s).
- → USDC86% LLTV0x4e49…bc77RedStone
WETHMarketChainlink$10,8230.2% of vault · bad debtOracle exposure $190.34$11,0130.2% of vault$10,8230.2% of vault$190.34separate path
WETH uses Chainlink market-rate aggregator feed(s).
- → USDC86% LLTV0x282f…71a2Chainlink
XAUt0MarketChainlink$9,6190.2% of vault · bad debtOracle exposure $187.75$9,8070.2% of vault$9,6190.2% of vault$187.75separate path
Priced off live market data — a depeg moves the price and can liquidate positions.
- → USDC77% LLTV0xa576…bf8bChainlink
WBTCMarketChainlink$8,1450.2% of vault · bad debtOracle exposure $124.65$8,2700.2% of vault$8,1450.2% of vault$124.65separate path
WBTC uses Chainlink market-rate aggregator feed(s).
- → USDC86% LLTV0x8819…14d9Chainlink
wsrUSDMarketChronicle / Chainlink$3.16<0.1% of vault · bad debt$3.16<0.1% of vault$3.16<0.1% of vault—
Priced off live market data — a depeg moves the price and can liquidate positions.
- → USDC92% LLTV0x77bd…06c3Chronicle / Chainlink
+4 markets with no current position
Oracle dependencies
2 feeds · 2 control pointsUp to$44,431drainable if these feeds are mispriced · 1% of vault
Each price traces to a feed and the on-chain admin that can move it. Compromise either to misprice the collateral and borrow against it. Per-row amounts overlap and are not summed.
- Chainlink / Chronicle·a 4/9 Safe multisigprices wstETH, syrupUSDC, wsrUSD, XAUt0, WBTC, siUSD, sUSDS, WETH, PT-USDai-18JUN20260x2f3b…d3c5$44,431 · 1% of vaultdrainable if it is compromised
- RedStone·a 2/3 Safe multisigprices weETH0x3c8b…fe4f$0.17 · <1% of vaultdrainable if it is compromised
How you could lose money
Each row is a distinct failure. Possible loss is the share of your deposit at the selected collateral drop; Worst case is the ceiling if everything goes wrong — a conditional loss if it happens, not a likelihood. Price-scaling rows move with the drop selector; the rest are fixed. Enter a deposit to see the dollar figures as your own. Open a row for conditions, mitigations, and the math.
| Full-deposit & protocol-level(2) | |||||
| 100% | $4.42m | Full deposit | Instant | ||
| 16% | $697,729 | up to $3.76m | Instant | ||
| Price-driven collateral stress(1) | |||||
| 16% | $697,729 | up to $3.76m | Instant | ||
| Oracle & liquidation failures(5) | |||||
| 16% | $697,729 | up to $3.76m | Instant | ||
| 16% | $697,729 | up to $3.76m | Instant | ||
| 16% | $697,729 | up to $3.76m | Instant | ||
| — | — | up to $44,431 | Instant | ||
| 0% | $0 | $0 | Instant | ||
| Vault role & allocator(3) | |||||
| — | — | Full deposit | 7 days | ||
| — | — | Full deposit | Instant | ||
| — | — | up to $2.21m | 7 days | ||
Who you're trusting
The people and processes that can change this protocol under you.
The roles that can actually move your deposit — the real principal-loss path.
Role timelock 7 days to exit before owner/curator actions land
Sentinels1 · 1 contractSafety role · veto only
Safety role, not an attack role: can revoke ANY pending timelocked curator change, instantly cut caps, and pull funds from adapters back to idle. Strictly risk-reducing — a captured sentinel cannot introduce new risk.
- contract0x1b54…8f14
Allocators3 · 1 multisig · 1 contract · 1 EOAReaches deposit · instant
Moves funds between markets the curator has ALREADY approved — instantly, with NO timelock and no exit window. Cannot reach a brand-new market, but can concentrate you into an approved-but-stressed market or order withdrawals so you hit weak liquidity first.
- 1-of-6 multisig0x0000…9da8
- contract0x2570…f462
- single key (EOA)0xfeed…3c9a
- Certora· 15 Dec, 2025report
- Blackthorn· 4 Dec, 2025report
- Spearbit· 4 Dec, 2025report
- Blackthorn· 15 Sep, 2025report
Protocol-wide governance: bounded context, not the path to your deposit.
Every Morpho Blue market chooses an immutable oracle contract at creation; implementations can be Chainlink-like, exchange-rate, fixed-price, or custom. Failure modes: attacker-favourable price feed (covered in market-oracle-compromise) or price() revert / staleness blocking liquidations (covered in oracle-liveness-or-malfunction).
No quantified loss scenario references this dependency directly.