Carrot’s shutdown turns the Drift hack into a DeFi stress test

Carrot’s decision to wind down after the Drift exploit is the clearest sign today that a hack story has turned into a survival test. It pushes last week’s DeFi repair theme into a tougher question: which crypto systems can keep working through losses and scrutiny, and which were only stable as long as funding, confidence, or the right news held up.

Carrot’s shutdown makes the Drift hack a live DeFi contagion test

May 14 is when the Drift exploit stops looking like an old hack headline and becomes a user funding problem. Carrot, a Solana yield app tied into Drift, says users need to pull remaining funds from its Boost, Turbo, and CRT products by then, after which it will begin deleveraging and winding down permanently.

That goes a step beyond the repair phase we were discussing last week. Then, the question was whether frozen losses could be socialized, recapitalized, or worked through by governance. Carrot adds the harsher version: some downstream apps do not have enough capital, fee income, or outside sponsor support to survive while they wait for an upstream recovery.

The numbers show why. Carrot’s TVL fell from about $28 million before the April 1 Drift exploit to roughly $1.99 million, a 93% collapse. On paper, that looks like a simple bank-run chart: users lose confidence, withdraw, and the app dies. But the more important detail is that Carrot was not just suffering from bad sentiment. It depended on Drift’s pools to generate yield. When attackers gained admin control at Drift after months of social engineering and drained more than half its TVL, they did not just hit one balance sheet. They damaged the asset base and yield engine that connected apps were built on.

That transmission channel matters. A dependent app can survive mark-to-market losses if it still has time, cash flow, and a credible backstop. Carrot appears to have run out of all three. Once users saw the upstream damage, deposits left, TVL shrank, and the app became financially unable to continue. The shutdown deadline then creates a second-order effect: users who remain are no longer choosing between higher or lower yield, but between exiting now or staying inside a deleveraging process with uncertain recovery timing.

Carrot is the clearest casualty so far, but it was not alone. The Drift attack also hit affiliated projects including Gauntlet, PrimeFi, and Elemental DeFi. That does not automatically mean each one follows Carrot into closure. It does show how DeFi losses spread when multiple products share the same collateral source, yield venue, or admin assumptions.

Carrot says it will help recovery efforts and distribute assets once available, so final losses are still uncertain. But the market signal is already clear: in this cycle, a system is not truly repaired just because the hack has stopped. It is repaired only if connected apps and users can stay solvent long enough for recovery to matter.

Bitcoin’s $77,000 rebound still leans on macro relief, not clear spot demand

April brought nearly $2 billion into U.S. spot bitcoin ETFs, yet futures traders are still paying to stay short while bitcoin sits in the same $75,000-$80,000 band it has held since April 19. That split matters more than the move back toward $77,000, because it suggests the flow story and actual trading posture are not lining up.

The initial lift looks straightforward enough: strong big-tech earnings improved risk appetite across markets and pulled bitcoin higher with equities. But the follow-through still looks weak. Funding rates have stayed broadly negative across venues, which means traders are still leaning into rally fades rather than chasing upside. Open interest around $19 billion is roughly flat week over week, so this is not a market showing fresh leveraged conviction on the long side either.

That helps reconcile the ETF data. April’s inflows were real, and large, but they were also concentrated. BlackRock’s IBIT accounted for about $2 billion of net inflows by itself, while GBTC kept bleeding and late April still saw roughly $490 million of outflows in just three trading days. In other words, the monthly total looks stronger than the day-to-day path underneath it. A few large allocators can make the month look healthy even if broader demand is still patchy and easy to reverse.

The more bearish read comes from the spot-versus-futures split. CryptoQuant’s argument is that April’s move was driven mainly by perpetual futures demand while spot demand contracted. That is an interpretation, not a settled fact, but it fits the rest of today’s tape: negative funding, steady open interest, and a market that keeps failing to turn rebounds into a clean break above $80,000.

Options are less gloomy than futures, with call volume running ahead of puts and short-dated downside hedging easing a bit. That leaves room for a squeeze higher if shorts get trapped. But right now traders appear to be paying for tactical upside optionality while still betting that spot buyers are not strong enough to hold a breakout. Until that changes, bitcoin’s rebound looks tradable, not yet durable.

Tokenized RWA Growth Is Coming From Treasurys, Not Stocks

$30.2 billion is a big number, and a market growing more than 420% since the start of 2025 looks like broad tokenization adoption at first glance. But most of that expansion came from the easiest institutional product to understand and approve: tokenized Treasurys, which reportedly grew from about $3.9 billion to more than $15 billion over the same stretch.

That matters because it sharpens the divide exposed when tokenized stocks started running into rights questions. The recent equity push showed how quickly the story gets messy once investors expect shareholder voting, direct claims on the underlying security, and familiar broker protections. Treasurys avoid much of that. Buyers are not asking for corporate governance rights or debating whether a token is really the share. They are buying short-duration government debt in a form that settles faster, can move onchain, and fits more easily into existing fund structures.

The institutional signal is not simply that finance is moving onchain. Capital is choosing the parts of traditional finance where the legal packaging is already clear, the yield is obvious, and the buyer does not need a long explanation of what they own. That helps explain why products like BlackRock’s BUIDL and Fidelity’s FDIT could attract attention sooner than more ambitious tokenized-equity designs. The token adds distribution and transfer flexibility; it does not have to reinvent investor rights from scratch.

Regulatory clarity also helps most where the asset is already familiar. Europe’s MiCA framework and similar efforts reduce uncertainty for firms offering tokenized products, but clear rules do not automatically make every category equally investable. A tokenized Treasury fund is still close to a known product sold in a new format. Tokenized equities and private credit ask institutions to get comfortable with harder questions around claims, disclosures, secondary liquidity, and who stands behind the instrument when something breaks.

So the growth is real, but it is also selective. Onchain finance is scaling first where the asset, the yield, and the legal story already make sense before the token ever enters the picture.