Carrot DeFi to Shut Down Following Drift Protocol Contagion

Carrot, a decentralized finance (DeFi) yield protocol on the Solana network, announced its permanent shutdown on Thursday. The decision follows a severe liquidity crisis triggered by the Drift Protocol exploit in early April, which has left Carrot financially unable to sustain its operations. The protocol's collapse serves as a stark example of contagion within the DeFi space. Because Carrot was integrated with Drift's infrastructure to generate yield for its users, the breach of the latter directly eroded Carrot's capital base. Other projects, including Gauntlet, PrimeFi, and Elemental DeFi, have also been impacted by the fallout. Data from DefiLlama reveals a precipitous decline in Carrot's total value locked (TVL), which plummeted 93% in a single month. The TVL dropped from approximately $28 million prior to the hack to just $1.99 million. This follows the Drift exploit on April 1, a highly coordinated social engineering attack that drained over half of Drift's TVL, totaling $285 million. The Drift incident is part of a broader trend of security breaches in 2026. April saw nearly $630 million stolen across 25 separate incidents, the highest monthly loss since February 2025. The largest exploit of the year thus far is the $293 million hack of the Kelp liquid staking protocol. Carrot has established a May 14 deadline for users to withdraw remaining funds from its Boost, Turbo, and CRT pools. The team stated that all leverage will be reduced to zero to free up liquidity for CRT redemptions, while continuing to assist in recovery efforts related to the original Drift exploit.