Volo Protocol hit by $3.5M exploit, team vows user protection

Volo Protocol lost $3.5M in a targeted exploit. The team froze assets, blocked further theft, and pledged to cover all losses, ensuring user funds in other vaults remain secure.

Volo Protocol, a liquid staking platform on the Sui blockchain, suffered a security breach resulting in the theft of approximately $3.5 million from three vaults containing WBTC, XAUm, and USDC. The incident was swiftly detected, prompting the team to notify the Sui Foundation and ecosystem partners. All vaults were immediately frozen to prevent further losses. Within 30 minutes, about $500,000 of the stolen assets were frozen, and the team successfully stopped the hacker from bridging out 19.6 WBTC. Importantly, the remaining vaults—holding around $28 million in total value locked—were unaffected and remain secure, with no shared vulnerabilities identified. Volo Protocol has pledged to cover all losses internally, ensuring users will not bear any financial impact. The team is actively working on remediation and will announce further plans once the situation is fully resolved.