Summer.fi Packs Up After $6M Exploit Turns Lazy Vaults Into a One-Way Exit 🪦

Decentralized finance platform Summer.fi will cease operations after a July 6 exploit drained roughly $6.04 million from its Lazy Summer Protocol, eliminating the capital the team said it needed to rebuild. The five-year-old platform said its app will remain accessible until August 31 while the Lazy Summer DAO works to restore withdrawals and redemptions across all vaults.

The attacker manipulated the share price across two of the protocol's USDC vaults on Ethereum ($ETH). LazyVault_LowerRisk_USDC (0x98C49e13…EcF17) recorded a net loss of nearly 5.64 million USDC, while LazyVault_HigherRisk_USDC (0xE9cDA459…cB06) lost about 0.40 million USDC, according to BeInCrypto. Summer.fi said a meaningful portion of its own capital was held in the affected vaults, and that loss removed the runway required to recover.

In a blog post, the team tied the closure to DeFi's wider slump following the Stream Finance fallout of October 2025, describing the July exploit as a "devastating moment" for users and the surrounding ecosystem. "After exploring every alternative, we have concluded that ceasing operations is the only viable path forward, even though it gives us great sadness," the team said.

Despite the shutdown, Summer.fi noted that the Lazy Summer DAO is working to reinstate redemptions across all vaults, including the two affected by the exploit. Once those processes are complete, full vault functionality will be restored through the Summer.fi interface.

Summer.fi joins a growing list of protocols unable to recover from a breach. Radiant Capital wound down in June after a $50 million exploit, and Step Finance closed in February following a treasury hack. In each case, the exploit proved terminal rather than survivable.