Carrot

Carrot was a Solana-based DeFi yield aggregation platform that operated under the tagline "Earn Yield. Stay Liquid. Be Stable." The protocol positioned itself as a "Yield Operating System" — a middleware layer that connected users to multiple Solana lending protocols through a single interface, automating yield optimization and compounding without requiring active management. It shut down permanently in April 2026 following losses caused by the Drift Protocol exploit.

Overview and Core Concept

Carrot addressed a common pain point in DeFi: fragmented liquidity across dozens of lending protocols, each offering different rates at different times. Rather than requiring users to manually track and rotate funds between Kamino, Solend, MarginFi, Meteora, Drift, and other platforms, Carrot deployed a Yield Routing Engine that continuously monitored rates across 8+ protocols and automatically reallocated capital to maximize returns. All interactions settled through Solana's low-cost infrastructure, making frequent rebalancing economically viable in a way that would be impractical on higher-fee chains.

The protocol charged no management fees, differentiating itself from comparable yield platforms. A small 0.05% redemption fee applied to withdrawals, functioning as the primary mechanism to protect the vault from arbitrage and rate manipulation.

Products

Earn (CRT): The flagship product. Users deposited USDC, USDT, or PYUSD into the Carrot vault and received CRT — a yield-bearing token that accrued value over time as the vault generated returns. CRT was implemented as an SPL Token-2022 asset. Capital inside the vault was automatically distributed across lending protocols, continuously rebalanced, with rewards compounded back into the vault. Users could redeem CRT for underlying stablecoins at any time subject to the redemption fee. Peak TVL across the protocol reached approximately $28 million.

Boost: A leveraged yield farming product targeting assets such as JLP, FLP, and ONyc. Boost automated a recursive lending loop: user deposits were supplied to lending protocols as collateral, stablecoins were borrowed against that collateral, and borrowed funds were redeployed to amplify the underlying yield. This mechanism converted base yields of around 5% into amplified returns in the 8-15% range, while the protocol managed position health automatically to reduce liquidation risk.

Turbo: Managed leveraged tokens providing directional exposure to assets including SOL, BTC, and GOLD at leverage ratios between 1.5x and 4x. Turbo vaults auto-rebalanced to maintain target leverage. These were implemented as a separate on-chain program and classified as a derivatives product.

Lend and Borrow: Isolated lending pools that allowed users to supply tokens to earn interest or borrow stablecoins against yield-bearing collateral. This product extended Carrot's functionality toward broader money-market use cases.

CRT Token

CRT was the core asset of the Carrot ecosystem. As a yield-bearing stablecoin, it was designed to hold its peg to USD-denominated value while accruing returns from the underlying vault strategy. CRT accepted three input assets: USDC, USDT, and PYUSD, all routed through a single vault and redeemable at any time. The token used the SPL Token-2022 standard, allowing value accrual to be encoded natively in the token's exchange rate rather than requiring separate reward-claiming transactions.

Integrations and On-Chain Footprint

Carrot's Yield Routing Engine connected to Kamino, Solend, MarginFi, Meteora, and Drift Protocol for lending yield. Jupiter handled swap routing, and Pyth Network provided price feed data. The protocol's main vault program deployed at address CarrotwivhMpDnm27EHmRLeQ683Z1PufuqEmBZvD282s on Solana mainnet. The DeFi-Carrot GitHub organization published 11 repositories, including CPI bindings for the vault and lending protocols.

Security and Audits

Smart contracts were audited by Sec3 and MadShield prior to launch. The vault architecture included emergency pause functions and market anomaly freeze capabilities.

Shutdown

Carrot shut down permanently in April 2026 as a direct consequence of the Drift Protocol exploit. On April 1, 2026, a coordinated attack drained more than $285 million from Drift Protocol — one of the largest DeFi exploits of 2026. Carrot was not directly attacked, but its deep integration with Drift resulted in contagion losses of approximately $8 million, representing roughly 28% of its TVL.

In the weeks following the exploit, Carrot's TVL collapsed from $28 million to approximately $2 million as users withdrew funds. On April 30, 2026, the team announced permanent closure. Users were given until May 14, 2026 to withdraw remaining funds. After that deadline, the protocol initiated force-deleveraging of all remaining open positions to 1x leverage.

Solana Ecosystem Fit

Carrot represented a class of Solana-native DeFi infrastructure that aggregated across the ecosystem's fragmented liquidity. By routing above individual lending markets, it served users who wanted exposure to Solana DeFi yields without managing positions across multiple protocols. Its zero-management-fee model and SPL Token-2022 yield-bearing token design reflected patterns common among Solana-native teams building for capital efficiency. Its shutdown illustrated systemic risks that arise when yield aggregators route significant TVL through a single integrated counterparty.