Volo Protocol Suspends Vaults Following $3.5 Million Exploit
Key Takeaways:
- Volo Protocol was exploited for $3.5 million from its WBTC, XAUm, and USDC vaults.
- The platform swiftly froze the compromised vaults and notified the Sui Foundation.
- Volo emphasizes it will absorb the financial blow, reassuring users they won’t bear the cost.
- Remaining vaults, with $28 million in total value locked, are reportedly secure.
- The freeze remains in effect until a thorough investigation and remediation are completed.
WEEX Crypto News, 2026-04-22 12:19:37
Volo Protocol Faces Multi-Million Dollar Security Breach
In a dramatic turn of events, Volo Protocol—a liquid staking platform on Sui—fell victim to a $3.5 million security breach, affecting its vaults holding WBTC, XAUm, and USDC. The attack was contained swiftly with notification to the Sui Foundation and ecosystem partners, leading to a freeze on the compromised vaults to prevent further financial hemorrhage. The precise exploit method remains undisclosed, and no suspects have been identified yet. However, Volo assures stakeholders that $28 million locked in other vaults remains intact and was not exposed to the same vulnerabilities found in the exploited vaults.
Transparency and User Assurance
In response to the incident, Volo Protocol announced its commitment to absorbing the financial loss rather than passing it on to users. Published statements emphasized the platform’s commitment: “We want to be clear: Volo is prepared to absorb this loss. We will do our best not to pass this to our users.” Trust restoration is paramount, and Volo is prioritizing damage control and asset protection. Within 30 minutes of detection, $500,000 worth of assets had already been secured through freeze orders, with recovery efforts continuing vigilantly.
Awaiting Investigation Outcomes
While Volo has not revealed a timeline for reopening the affected vaults, they have assured users that the review and remediation process is of utmost priority. The freeze will remain until a comprehensive analysis and risk mitigation strategy ensure no further vulnerabilities persist. This incident follows another massive $292 million exploit involving Kelp DAO, connected to the infamous North Korea’s Lazarus Group. Currently, Volo has not associated its breach with the previous attacker.
Current Landscape and Protocol Security
This incident underlines a broader vulnerability within DeFi platforms, with major losses stemming from security lapses. The crypto community is reminded of past calamities, like the $285 million expected loss for the Drift Protocol, which targeted Solana’s DeFi scene using social engineering tactics. These repeated breaches highlight the importance of robust security protocols, transparency, and user protection strategies.
Sui’s Broader Market Activity
Despite the recent security challenges, the Sui ecosystem shows resilience. Products such as the native USDsui stablecoin for payments and DeFi applications demonstrate proactive enhancements in Sui’s functionality. Moreover, spotlights on SUI price trends, with ETF launches and price support milestones, underscore continuous community and market interest despite vulnerabilities in some protocols.
FAQ Section
How has Volo Protocol addressed the security breach?
Volo swiftly froze the impacted vaults and communicated with the Sui Foundation. They are undertaking a full investigation to prevent recurrence and have committed to absorbing the financial loss themselves.
Are Volo users at risk of losing their funds?
No, Volo has assured users that it will absorb the losses from the exploit, ensuring that users’ funds are not affected.
Is there a timeline for reopening the affected vaults?
Volo has not set a specific timeline for reopening, as they prioritize completing a rigorous investigation and ensuring all vulnerabilities are mitigated.
How have Volo Protocol’s other vaults been affected?
$28 million in other vaults remains unaffected, with assurances that these vaults do not share the vulnerabilities of the exploited ones.
What can users do to stay informed about such security incidents?
Users can follow Volo Protocol’s official social media channels and platforms like WEEX News for timely updates about security incidents and recovery processes within the crypto landscape.
You may also like

Morning Report | OpenAI has submitted an S-1 registration statement draft to the U.S. SEC; Morpho completes $175 million financing

Galaxy Deep Research Report: How Hyperliquid's HIP-4 Upgrade Changes the Landscape of Prediction Markets?

Latest research from 13 top universities including Cornell University: The current state, challenges, and misconceptions of the fusion of Crypto and AI

Deconstructing Anthropic: The Best AI Company, Possibly Also a Type of Organizational Invention

Every exchange is a "Universal Exchange."

The counterattack of traditional finance: Alliance chains are quietly reviving

Pantera Capital Partner: How Tokenization is Restructuring the Private Equity and Early Investment Ecosystem?

Mastercard Launches Agent Pay for AI, Plans to Record AI Agent Payment Authorizations on Polygon
Mastercard launched Agent Pay for AI, a new payment protocol designed to help AI agents make small payments such as pay-per-use access to data and APIs. The system plans to record human-granted AI agent permissions on Polygon, focusing on verifiable authorization, identity, and payment controls.

Curve Deploys Llamalend v2 on Optimism With 250,000 OP Incentives
Curve launched Llamalend v2 on Optimism with 250,000 OP incentives from the Optimism Foundation. The upgrade expands Llamalend beyond its earlier crvUSD-focused model, adding broader collateral support, LlamaRisk market reviews, and the ability to use Curve LP tokens as collateral.

Raydium Old Liquidity Pool Reportedly Exploited, With $1.34 Million Moved to Ethereum and Tornado Cash
An old Raydium liquidity pool was reportedly exploited for around $1.34 million in USDC, RAY, and wSOL, with the stolen funds bridged to Ethereum and deposited into Tornado Cash. The incident highlights the tail risks of legacy DeFi pools, old contracts, and cross-chain fund laundering paths.

Kalshi Executive Challenges “SBF Backed AI Unicorns” Narrative, Says Leopold Aschenbrenner Was Key Figure
Kalshi executive John Wang questioned the “SBF backed AI unicorns” narrative, saying Leopold Aschenbrenner was the key figure behind major AI investment decisions.

New York Proposes Stricter Stablecoin Issuer Rules Aligned With Federal GENIUS Act
NYDFS proposed stricter stablecoin issuer rules aligned with the GENIUS Act, covering reserves, custody, redemption timelines, audits, and capital buffers.

CryptoQuant Says Bitcoin Profitable Supply Is Near 45% Pressure Zone as On-Chain Data Points to Market Repricing
CryptoQuant said Bitcoin’s profitable supply is nearing the 45% pressure zone, signaling rising market stress, unrealized losses, and a possible on-chain repricing phase.

Bitcoin Falls Below 200-Week Moving Average as On-Chain Data Shows Over Half of Supply in Loss
Bitcoin dropped below its 200-week moving average as on-chain data showed over 50% of circulating supply is now in loss, signaling rising market stress.

CFTC Reportedly Plans New Prediction Market Rules Focused on Manipulation Risk and Public Interest Review
The CFTC is reportedly preparing new prediction market rules focused on manipulation risk, public interest review, and retail trader protections.

Meet the new WEEX trial fund—your gateway to greater profits

WEEX Labs Lands at Dutch Blockchain Week: A Disruptive Crypto × AI Conversation Sets Sail in Amsterdam

SK Hynix Reportedly Plans U.S. ADR Listing as Early as August, With SEC Approval Possible in Late June
SK Hynix may pursue a U.S. ADR listing as early as August, with SEC approval reportedly possible in late June amid strong AI chip supply chain demand.




