Volo Protocol Loses 3.5M in Sui Vault Exploit

Volo Protocol, a liquid staking platform on the Sui blockchain, reported an exploit early Wednesday that drained approximately 3.5 million in digital assets from three of its vaults, prompting an immediate freeze of operations to contain the damage.

The breach targeted vaults holding wrapped Bitcoin (WBTC), gold-backed XAUm, and USD Coin (USDC), according to a statement from the Volo team posted on X. The platform detected unusual activity and acted swiftly, notifying the Sui Foundation and ecosystem partners while halting transactions in the affected vaults. Within 30 minutes of the public announcement, Volo secured about 500,000 in exploited assets through on-chain interventions, though the majority of the stolen funds remain under investigation. The team emphasized that the vulnerability was isolated, with no shared attack vector affecting the protocol's other products. Approximately 28 million in total value locked across unaffected vaults remains secure, Volo said.

Volo, which originally launched as a dedicated liquid staking service for Sui's native token before its acquisition by lending protocol NAVI in early 2024, offers yield-generating vaults that accept wrapped...