Two years of building. Gone in weeks.
Carrot DeFi announced on April 30 it is permanently shutting down, a direct casualty of the $285 million Drift Protocol exploit that rocked Solana on April 1. The team posted a final thread on X confirming the decision and giving users a hard deadline to retrieve their funds.
According to DefiLlama, Carrot held roughly $28 million in total value locked on the day of the Drift breach. By the time the shutdown was announced, that number had collapsed to around $1.99 million. That is a loss of over 93% in under 30 days.
What the Final Thread Actually Said
@DeFiCarrot posted the news in a six-part thread on X. The opening post did not bury the lead.
“Carrot is shutting down. This is certainly not the outcome we wanted, but the situation with the Drift exploit has proven to be catastrophic for our continued operations.”
The second post set the terms. May 14 is the deadline for users to voluntarily pull any remaining funds from Boost, Turbo, and CRT. After that date, Carrot will begin deleveraging all positions to zero, freeing up liquidity to process CRT redemptions. No management fees will apply during the wind-down.
Carrot’s three products each served different roles. Boost let users deposit yield-bearing assets like JLP, FLP, or ONyc as collateral and pick a leverage level, with the protocol handling the looping automatically. Turbo gave users managed leveraged exposure to assets including SOL, BTC, and GOLD. CRT operated as a yield-bearing stablecoin that accepted USDC, USDT, or PYUSD with no lockups attached.
Recovery Funds Still in Play
The shutdown does not mean Drift recovery distributions are off the table. In the third post of the thread, @DeFiCarrot confirmed that any recovery Drift manages to pull off will still be passed through to Carrot users as previously stated.
No timeline exists for when that may happen, but the team said it will remain operational specifically to handle that process and honor the commitment.
That matters for CRT holders. The token’s net asset value had already taken a hit. Mid-April data showed CRT NAV sitting at approximately $57.52 to $57.58 per token, down from pre-exploit levels, reflecting both realized and unrealized losses from the Drift fallout.
The fourth post in @DeFiCarrot’s thread described the shutdown as a hard decision for everyone on the team who had put years into the project.
“Over the past 2+ years it has been our mission to make DeFi easy and accessible for everyone. First with CRT, and then Carrot Lend with Boost and Turbo. Winding down is a hard decision for all of us that have poured so many hours and resources into Carrot.”
A Protocol That Did Not Fail From Within
Carrot was not exploited directly. That is the part most coverage flattens. The protocol had functioning products, two years of operations, and a user base that trusted its yield automation. What broke it was exposure, not code.
The Drift exploit, as we reported, involved attackers spending roughly six months building a fake identity as a legitimate trading firm before draining Drift’s vaults using durable nonce accounts to pre-sign administrative transactions. The attack hit roughly 15 to 20 Solana protocols that had integrated with Drift for liquidity, vaults, or yield. Carrot was among them.
Gauntlet, PrimeFi, and Elemental DeFi all faced severe liquidity pressure following the same breach, according to data cited by MoneyCheck. Carrot became the first to formally announce a complete and permanent shutdown.
Security firms TRM Labs and Chainalysis both attributed the Drift exploit to UNC4736, a North Korean state-linked unit. The April 2026 DeFi hacks recap we published placed Drift at $285 million in losses, ranking it the second-largest crypto attack of 2026 after the $293 million KelpDAO breach.
What Users Need to Do Now
The May 14 deadline is firm. Users with funds in any of Carrot’s three products need to connect their wallets and withdraw before that date. After May 14, @DeFiCarrot said in post five of the thread it will begin the deleveraging process on all remaining positions.
Deposited funds remain the property of users throughout this process. The protocol confirmed no management fees will be charged during wind-down. Anyone with CRT tokens will have liquidity freed up once the deleveraging is complete.
For tracking any future Drift recovery distributions, users are advised to monitor @DeFiCarrot’s official X account directly. The sixth and final post in the thread carried no additional detail. It simply read: “This is the final tweet.”
