Key Takeaways:
Solana-based yield protocol Carrot announced on April 30 it is ceasing operations after its total value locked plunged over 90% from $28 million to roughly $2 million. The collapse was a direct result of contagion from the $285 million exploit on Drift Protocol, a perpetuals exchange on Solana.
"The impact of the incident had proven catastrophic for its continued operations," the Carrot team said in its announcement. The protocol has given users a final deadline of May 14 to withdraw funds from its Boost, Turbo, and CRT products before a full deleveraging process begins.
Carrot was not directly exploited. Instead, its deep integration with the Drift ecosystem meant the larger protocol's failure cascaded into its own. Data from DefiLlama shows Carrot’s TVL stood at approximately $28 million on April 1, the day of the Drift hack. In the following weeks, capital fled the protocol, pushing its TVL down to just $2 million.
The shutdown is one of the clearest examples of second-order contagion risk in decentralized finance, where an attack on one protocol can trigger the failure of another. The Drift exploit, attributed by TRM Labs to North Korean state-backed hackers, was one of two major April attacks, alongside the $292 million KelpDAO breach, that brought Pyongyang's total crypto theft in 2026 to nearly $600 million.
The incident underscores a trend of increasingly sophisticated attacks targeting DeFi protocols. The Drift hack involved a six-month intelligence operation that culminated in the compromise of an admin key, a method also used in the recent $4.5 million exploit of Wasabi Protocol. Security analysts at TRM Labs suggest the attackers, likely from the Lazarus Group, may be using AI tools to enhance their reconnaissance and social engineering efforts, posing a significant new threat to the crypto ecosystem.
Any funds eventually recovered from the Drift exploit will be distributed to affected Carrot users, though no timeline for recovery has been established.
This article is for informational purposes only and does not constitute investment advice.
