{"id":88676,"date":"2026-05-02T03:03:18","date_gmt":"2026-05-02T03:03:18","guid":{"rendered":"https:\/\/dogewisperer.com\/?p=88676"},"modified":"2026-05-02T03:03:18","modified_gmt":"2026-05-02T03:03:18","slug":"solana-yield-protocol-carrot-shuts-down-after-8m-exploit","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=88676","title":{"rendered":"Solana Yield Protocol Carrot Shuts Down After $8M Exploit"},"content":{"rendered":"<div>\n<p>Carrot, a Solana-based DeFi yield protocol, announced its permanent shutdown on April 30, 2026, after losing approximately $8 million in total value locked, roughly half its TVL \u2013 to the fallout from the <a class=\"general-link\" href=\"https:\/\/news.bitcoin.com\/solana-yield-protocol-carrot-shuts-down-after-drift-exploit-drains-8m-in-tvl\/\" target=\"_blank\" rel=\"noopener nofollow\">April 1 Drift Protocol exploit<\/a> that drained an estimated $285 million from one of Solana\u2019s largest perpetual futures platforms.<\/p>\n<p>Carrot was not directly hacked. It was taken down by a protocol it depended o, and that distinction is what makes this story more than a routine exploit summary.<\/p>\n<p>Users have until May 14, 2026, to voluntarily withdraw funds from Carrot\u2019s three core products. After that deadline, the team will begin force-deleveraging all remaining positions to 1x leverage, freeing liquidity for final CRT stablecoin redemptions.<\/p>\n<p>Carrot\u2019s official account on X confirmed the decision plainly: \u201cCarrot is shutting down. This is certainly not the outcome we wanted, but the situation with the Drift exploit has proven to be catastrophic for our continued operations.\u201d<\/p>\n<p>A snapshot of CRT token holdings was taken at 20:00 UTC on April 1, the exact moment of the Drift exploit, to preserve proportional claims for any future Drift recovery distributions paid via IOU token.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">1\/ Carrot is shutting down<\/p>\n<p>This is certainly not the outcome we wanted, but the situation with the Drift exploit, has proven to be catastrophic for our continued operations.<\/p>\n<p>\u2014 Carrot (@DeFiCarrot) <a href=\"https:\/\/twitter.com\/DeFiCarrot\/status\/2049907092664762624?ref_src=twsrc%5Etfw\" rel=\"nofollow\" target=\"_blank\">April 30, 2026<\/a><\/p>\n<\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>The detail most headlines are missing is that Carrot never had a vulnerability in its own code. Its Boost and Turbo products routed user funds through Drift-integrated vaults, meaning Drift\u2019s security was also Carrot\u2019s security, whether Carrot\u2019s users knew that or not.<\/p>\n<p><strong>DISCOVER:\u00a0<a class=\"general-link\" href=\"https:\/\/99bitcoins.com\/best-crypto-presales\/\" target=\"_blank\" rel=\"nofollow noopener sponsored\">The Next 1000x Crypto Gem Before It Lists on Binance<\/a><\/strong><\/p>\n<h2>How Did the Drift Protocol Exploit Actually Work?<\/h2>\n<p>The Drift exploit, which the Drift Protocol confirmed occurred at approximately 20:00 UTC on April 1, used what investigators have described as a novel durable nonce exploit, a technique that manipulates how Solana handles pre-authorized transaction signing to compromise administrative controls.<\/p>\n<p>Attackers, suspected to have ties to North Korean state-sponsored groups, spent roughly three weeks preparing the attack before executing it. Over 50% of Drift\u2019s TVL was drained in minutes, triggering an immediate suspension of deposits and withdrawals across the platform.<\/p>\n<figure id=\"attachment_345336\" aria-describedby=\"caption-attachment-345336\" style=\"width: 1024px\" class=\"wp-caption alignnone\"><img fetchpriority=\"high\" decoding=\"async\" class=\"size-large wp-image-345336\" src=\"https:\/\/99bitcoins.com\/wp-content\/uploads\/2026\/05\/photo_2026-05-01_11-00-14-1024x319.jpg\" alt=\"\" width=\"1024\" height=\"319\" srcset=\"https:\/\/99bitcoins.com\/wp-content\/uploads\/2026\/05\/photo_2026-05-01_11-00-14-1024x319.jpg 1024w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2026\/05\/photo_2026-05-01_11-00-14-300x94.jpg 300w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2026\/05\/photo_2026-05-01_11-00-14-768x239.jpg 768w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2026\/05\/photo_2026-05-01_11-00-14-50x16.jpg 50w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2026\/05\/photo_2026-05-01_11-00-14.jpg 1280w\" sizes=\"(max-width: 1024px) 100vw, 1024px\"><figcaption id=\"caption-attachment-345336\" class=\"wp-caption-text\">Source: Drift TVL \/ <a class=\"general-link\" href=\"https:\/\/defillama.com\/protocol\/drift?fees=false&amp;events=false\" target=\"_blank\" rel=\"noopener nofollow\">DefiLlama<\/a><\/figcaption><\/figure>\n<p>Carrot held significant exposure through Drift-integrated vaults and liquidity positions. Shortly after the exploit, the team paused all minting and redemption functions while assessing the damage.<\/p>\n<p>By mid-April, Carrot\u2019s CRT net asset value had been adjusted to approximately $57.52 to $57.58 per token, reflecting both realized and unrealized losses. The Drift hack is now the largest DeFi exploit of 2026 and the second-largest in Solana\u2019s history \u2013 a data point that matters for anyone evaluating <a class=\"general-link\" href=\"https:\/\/99bitcoins.com\/news\/presales\/solana-price-forecast-below-85\/\" target=\"_blank\" rel=\"noopener\">the health of the broader Solana ecosystem<\/a> right now.<\/p>\n<p>Carrot operated for more than two years before this shutdown, building what it described as a \u201cyield operating system\u201d for Solana. No management fees apply during the wind-down period, and the team has confirmed that deposited funds remain the legal property of users throughout the process.<\/p>\n<p><strong>EXPLORE: <a class=\"general-link\" href=\"https:\/\/99bitcoins.com\/best-crypto-presales\/\" target=\"_blank\" rel=\"nofollow noopener sponsored\">Best Crypto Presales to Watch<\/a><\/strong><\/p>\n<div>\n<div>\n<div>\n<div>\n<div>\n<div><b>Follow 99Bitcoins on <\/b><b><a href=\"https:\/\/x.com\/99BitcoinsHQ\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">X<\/a><\/b><b> For the Latest Market Updates and Subscribe on <\/b><b><a href=\"https:\/\/www.youtube.com\/@99bitcoins\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">YouTube<\/a><\/b><b> For Daily Expert Market Analysis.<\/b><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<p>The post <a href=\"https:\/\/99bitcoins.com\/news\/altcoins\/carrot-protocol-shutdown-solana-exploit\/\">Solana Yield Protocol Carrot Shuts Down After $8M Exploit<\/a> appeared first on <a href=\"https:\/\/99bitcoins.com\/\">99Bitcoins<\/a>.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Carrot, a Solana-based DeFi yield protocol, announced its permanent shutdown on April 30, 2026, after losing approximately $8 million in total value locked, roughly half its TVL \u2013 to the fallout from the April 1 Drift Protocol exploit that drained an estimated $285 million from one of Solana\u2019s largest perpetual futures platforms. Carrot was not [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":0,"footnotes":""},"categories":[2],"tags":[3,4,5],"class_list":["post-88676","post","type-post","status-publish","format-standard","hentry","category-news","tag-crypto","tag-doge","tag-news"],"_links":{"self":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/88676","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=88676"}],"version-history":[{"count":0,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/88676\/revisions"}],"wp:attachment":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=88676"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=88676"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=88676"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}