Volo Protocol Loses $3.5 Million in Sui Vault Exploit Amid DeFi Hack Streak
Sui-based liquid staking platform Volo Protocol stated on Wednesday that an attacker drained roughly $3.5 million from three of its vaults, the most recent DeFi safety breach in a month already shaken by nine-figure exploits.
Volo froze each vault after detecting the assault and notified the Sui Foundation. The stolen property included Wrapped Bitcoin (WBTC), gold-backed XAUm, and USD Coin (USDC). The group stated the remaining $28 million in whole worth locked throughout different vaults carries no shared assault vector.
Inside the Volo Protocol Exploit
Volo described the breach as a safety incident in an announcement posted on X early Wednesday. Only three vaults have been affected, and the group stated no different a part of the protocol shares the identical vulnerability.
The mission is working with on-chain investigators and ecosystem companions to hint and get well the stolen funds. A full autopsy will comply with as soon as the interior evaluate concludes.
Volo initially launched as a devoted SUI liquid staking platform, issuing the Volo Staked SUI (vSUI) token, earlier than being acquired by Sui lending protocol NAVI in early 2024. The vault merchandise focused in this incident sit on high of that staking layer and settle for wrapped property and stablecoins as collateral for yield methods.
Volo additionally moved to reassure customers that any losses wouldn’t be handed on.
“Volo is ready to soak up this loss. We will do our greatest to not go this to our customers,” Volo group, said.
The protocol stated a remediation plan would comply with as soon as injury management operations end, including that rebuilding consumer belief depends upon actions relatively than guarantees.
Latest Hit in a Brutal Month for DeFi
Volo’s loss follows a string of main April incidents which have battered decentralized finance. Solana-based Drift Protocol misplaced about $285 million on April 1, in what Elliptic has linked to a suspected North Korean infiltration operation.
Less than three weeks later, restaking protocol Kelp DAO was drained of 116,500 restaked ether (rsETH) value roughly $292 million by way of a compromised LayerZero bridge. Ethereum DeFi has since misplaced greater than 17% of its whole worth locked.
Balancer additionally misplaced greater than $128 million to an exploit earlier in the 12 months. A focused pockets drain value one particular person investor over $280 million throughout Ethereum and Arbitrum.
The Sui ecosystem has confronted comparable crises earlier than. Attackers exploited the Cetus trade for about 223 million {dollars} in May 2025. A flaw in concentrated liquidity swimming pools enabled the assault. Sui validators and the group recovered most stolen funds. Total worth locked on Sui exceeded 2.6 billion {dollars} in late 2025. This development expanded the assault floor for exploiters. Attackers now goal vault logic and oracle dependencies extra typically.
Volo guarantees to cowl the three.5 million greenback loss with out exterior assist. Depositors will watch carefully when withdrawals reopen. The autopsy ought to make clear the foundation trigger. It will present whether or not the flaw was remoted or systemic. The findings might impression belief in the Sui DeFi ecosystem.
The put up Volo Protocol Loses $3.5 Million in Sui Vault Exploit Amid DeFi Hack Streak appeared first on BeInCrypto.
