DeFi platform Summer.fi has announced it will wind down operations after suffering a $6.04 million exploit on its Lazy Summer Protocol. The attack, which occurred on July 6, wiped out the capital needed to rebuild and forced the team to cease operations.
The attacker manipulated share prices across two USDC vaults on Ethereum (ETH), leaving LazyVault_LowerRisk_USDC down by approximately 5.64 million USDC and LazyVault_HigherRisk_USDC down by about 0.40 million USDC. The Summer.fi team stated that a significant portion of their own capital was held in the affected vaults, removing the runway required to recover.
In a blog post, the team expressed their devastation at the loss and its impact on users and the surrounding ecosystem. They noted that DeFi's wider slump is partly due to the Stream Finance fallout of October 2025. The Summer.fi app will remain live until August 31 during the wind-down process.
The Lazy Summer DAO is working to restore withdrawals and redemptions across all vaults, including the two affected by the exploit. Once these processes are complete, full vault functionality will be reinstated through the Summer.fi interface.