Carrot DeFi shutdown is official. The Solana-based yield protocol announced on Thursday that it will permanently close operations. The April 1 attack on Drift proved “catastrophic.” The team set May 14 as the deadline for users to withdraw remaining funds. After that, they will deleverage the system and free up liquidity.
Carrot was integrated with Drift’s infrastructure. It relied on Drift’s liquidity pools to generate yield. When the exploit drained a huge chunk of Drift’s TVL, Carrot got crushed. DefiLlama data shows Carrot’s TVL fell from roughly $28 million before the incident to just $1.99 million – a 93% drop.
Why the Carrot DeFi Shutdown Matters
The Drift hack was no simple exploit. It followed months of preparation. Attackers built trust with contributors through in-person meetings at crypto conferences, posing as a quantitative trading firm. Then they delivered malicious tools. External estimates put losses at about $280 million. Drift has “medium-high confidence” that the same actors were behind the October 2024 Radiant Capital hack ($58 million).
Carrot’s team said they will continue assisting recovery efforts and distribute assets once recovered. But for users, the message is clear: withdraw by May 14.
The impact extends beyond Carrot. Gauntlet, PrimeFi, and Elemental DeFi have also reported disruptions.
April Was Brutal for DeFi
DefiLlama data shows April recorded nearly $630 million in crypto losses across 25 incidents – the largest monthly exploit total since February 2025. The293M Kelp attack remains the biggest of 2026, followed by Drift at ~$285M. Together, they account for over 90% of April’s losses.
For yield chasers, Carrot DeFi shutdown is a painful reminder: when a core protocol gets compromised, the whole house of cards can fall.
My Thoughts
This is the dark side of DeFi composability. Carrot did nothing wrong – but because it was built on Drift, it died anyway. The “medium-high confidence” link to North Korea‑linked actors (Radiant hack) adds a geopolitical edge. For traders, the Carrot shutdown signals that Solana DeFi is still fragile. TVL can evaporate overnight. The May 14 deadline means some users may take losses if they miss it. Expect more protocols to quietly wind down. The lesson? Diversify across L1s and avoid over‑exposure to any single lending hub. Safety first, yield second.
