Carrot Protocol Shuts Down Following Massive Drift Exploit
- Carrot protocol ceased operations on April 30, 2026, due to the $285 million Drift Protocol exploit.
- Users have until May 14, 2026, to withdraw funds from Carrot’s Boost, Turbo, and CRT products before forced deleveraging begins.
- The exploit affected over 50% of Drift’s total value locked (TVL), causing a suspension of deposits and withdrawals.
- Carrot’s TVL was significantly impacted, with losses estimated above $8 million.
- Recovery distributions will be made via IOU token based on a CRT snapshot from April 1, preserving user claims even after redemption.
The shutdown of Carrot protocol comes in the wake of the largest DeFi exploit of the year and highlights vulnerabilities within interconnected Solana protocols reliant on Drift for liquidity and yield strategies.
This incident underscores the risks associated with deep integrations in decentralized finance systems as Carrot users face significant losses due to their exposure through Drift-integrated vaults and liquidity positions. Source