Summary

  • Sentora-managed morpho vaults saw sharp outflows after the MetaMask staking security incident on October 1 2026.
  • The Bitget hack of $387 million and North Korea-linked exploits add pressure on DeFi security audits across the sector.
  • RLUSD and PYUSD vaults held roughly $8.46 million and $2.38 million in available liquidity in the latest Morpho snapshots.

Traders yanked liquidity from Sentora-managed Morpho vaults right after MetaMask revealed its staking security incident on October 1 2026. The pullouts piled onto damage from the earlier $387 million Bitget hack. North Korea-linked actors carried out that theft.

These outflows show quick risk aversion in lending markets. They do not point to problems inside the protocol itself.

Context

The MetaMask incident hit months after the Bitget exploit. It landed during a rough stretch for the sector in 2026. CertiK data shows that excluding the Bybit breach, H1 2026 losses ran roughly 28 percent higher than the same period in 2025.

North Korea-linked groups took $1.92 billion in the first half of the year. The thefts put fresh heat on DeFi security audits and vault risk management.

Details

Morpho snapshots showed the RLUSD vault with $8.46 million in available liquidity. The PYUSD vault sat at $2.38 million before withdrawals sped up. The Defiant noted that Sentora outflows started right after the October 1 disclosure.

"Morpho vaults saw sharp outflows after MetaMask disclosed a staking security incident on October 1 2026."

, The Defiant (https://thedefiant.io/news/defi/sentora-s-morpho-vaults-see-sharp-outflows-amid-metamask-staking-incident)

The pattern matches earlier exchange and wallet incidents. Those events often trigger short-term shifts out of onchain lending products. Bitget's use of Morpho for onchain lending now draws extra questions on vault resilience.

Outlook

Market participants will watch vault liquidity metrics in the weeks before the DeFi Security Summit. The event runs November 1-2 2026 in Mumbai.