$6 Million Vault Exploit Forces DeFi Platform Summer.fi to Wind Down

Summer.fi will wind down operations after a $6.04 million exploit hit its Lazy Summer Protocol on July 6, wiping out the capital the team needed to rebuild.

The five-year-old Decentralized Finance (DeFi) platform said the app will remain live until August 31.

Summer.fi Closes Doors as July 6 Exploit Wipes Out Rebuild Runway

In a blog post, the team tied DeFi’s wider slump to the Stream Finance fallout of October 2025. It described the July exploit as a “devastating moment” for users and the surrounding ecosystem.

BeInCrypto reported losses of roughly $6 million. The attacker manipulated the share price across two of the protocol’s USDC vaults on Ethereum (ETH).

Follow us on X to get the latest news as it happens

The damage landed unevenly between the two pools. LazyVault_LowerRisk_USDC (0x98C49e13…EcF17) took a net loss of nearly 5.64 million USDC. LazyVault_HigherRisk_USDC (0xE9cDA459…cB06) lost about 0.40 million USDC.

The team said a meaningful portion of its own capital was held in the affected vaults. That loss removed the runway required to recover.

“After exploring every alternative, we have concluded that ceasing operations is the only viable path forward, even though it gives us great sadness,” the team said.

Despite the shutdown, Summer.fi noted that the Lazy Summer DAO is working to restore withdrawals and redemptions across all vaults, including the two affected by the exploit. Once those processes are complete, full vault functionality will be reinstated through the Summer.fi interface.

Summer.fi joins a growing list of protocols that could not survive a breach. Radiant Capital wound down in June after a $50 million exploit. Step Finance closed in February following a treasury hack. In each case, the exploit proved terminal rather than survivable.

Subscribe to our YouTube channel to watch leaders and journalists provide expert insights