Summer.fi says it will shut down after a July 6 exploit drained $6.04 million from its Lazy Summer Protocol, a loss the team says erased the capital it needed to continue rebuilding. The DeFi platform, which has operated for five years, plans to keep its application live until August 31 while work continues on user access to funds.
Exploit hit two Ethereum vaults
According to the team, the attacker manipulated the share price in two USDC vaults on Ethereum. The losses were concentrated in LazyVault_LowerRisk_USDC, which recorded a net loss of nearly 5.64 million USDC. A second pool, LazyVault_HigherRisk_USDC, lost about 0.40 million USDC.
BeInCrypto had previously reported losses of roughly $6 million, and Summer.fi has now put the figure at $6.04 million. The company described the incident as a severe blow for both users and the broader ecosystem around the protocol.
Why the platform is shutting down
In a blog post, Summer.fi said a meaningful share of its own capital was stored in the affected vaults. That exposure, the team said, removed the financial runway required to recover from the attack and continue operations.
The company said it had reviewed alternatives before deciding to wind down. It described the shutdown as the only viable option after the exploit. The decision marks the end of a five-year run for the platform.
Service to remain available until late August
Although the business is preparing to cease operations, Summer.fi said the app will remain live through August 31. During that period, the Lazy Summer DAO is working to restore withdrawals and redemptions across all vaults, including those directly affected by the exploit.
The team said full vault functionality will be reinstated through the Summer.fi interface once that process is complete. No broader timeline for the restoration work was detailed in the source article beyond the app’s stated availability through the end-of-August date.
Broader DeFi backdrop
Summer.fi linked the latest setback to a wider downturn in DeFi, pointing in its blog post to fallout from Stream Finance in October 2025. The company also noted that other protocols have shut down following major security breaches.
The closure leaves Summer.fi trying to manage an orderly wind-down while the associated DAO seeks to re-enable withdrawals and redemptions. The immediate facts remain centered on the July 6 exploit, the two affected Ethereum USDC vaults, and the team’s claim that the losses exhausted the resources it would have needed to rebuild.
Source: beincrypto.com