Key Takeaways
- Carrot has officially announced a permanent shutdown after its TVL plummeted by 93%.
- Users have until May 14, 2026, to remove their assets before the system begins final deleveraging.
- The $285 million Drift Protocol hack remains the second-largest exploit of 2026, causing widespread industry fallout.
Carrot is officially shutting down. The Solana yield protocol is the first major casualty of the $285M Drift exploit, which effectively wiped out 93% of Carrot’s TVL. The team has signaled that they can no longer stay afloat, urging all users to withdraw their funds by May 14.
This marks a grim milestone for the ecosystem as the ‘always-on’ risks of DeFi integration come home to roost. Since the massive $285 million breach in early April, Carrot’s Total Value Locked (TVL) has withered from $28 million to less than $2 million. This 93% collapse has left the team without the liquidity or operational capital required to maintain the platform, marking a somber chapter for Solana-based DeFi.
Carrot Becomes the First Major Casualty of the Drift Hack
The shutdown of Carrot highlights the dangerous “money lego” nature of DeFi. Because Carrot was deeply integrated with Drift’s infrastructure—using its liquidity pools to generate returns for users—the attack on Drift was a direct hit to Carrot’s core engine.
The Drift exploit itself was a masterpiece of social engineering, where hackers spent months gaining administrative control to drain over half of the protocol’s assets. As Carrot’s underlying yield sources evaporated, the protocol was unable to sustain its leveraged positions, leading to the “catastrophic” financial state described by the team in their recent announcement.
Withdrawal Procedures and Final Deleveraging Timeline
To protect what remains of user capital, Carrot has established a strict deadline of May 14, 2026, for all withdrawals from its Boost, Turbo, and CRT vaults. Following this date, the protocol will begin a forced deleveraging process, reducing all system leverage to zero to free up any remaining liquidity for final redemptions.
While the team is still working hard to help with recovery efforts after the Drift hack, their main focus right now is just getting everyone out safely. They’re urging users to close their positions before the platform officially goes dark. It’s been a brutal month—April 2026 has already seen over $630 million drained across the industry, with the $285 million hit on Drift being one of the toughest blows yet.
Final Thoughts
The fall of Carrot is a stark reminder of protocol interdependency risk. When the “foundation” protocol like Drift fails, the entire skyscraper built on top of it is at risk of tumbling down.
Frequently Asked Questions
What is the deadline to withdraw funds from Carrot?
Users must withdraw all assets by May 14, 2026.
Are my funds still safe on Carrot?
Deposited funds are still accessible, but the protocol is shutting down and reducing leverage to zero.
What happened to the Drift Protocol?
Drift was hit by a $285 million admin-level exploit in early April, which caused a liquidity crisis for its partners.















