Volo Protocol Hit by $3.5M Hack, Freezes Vaults on Sui

Volo Protocol lost $3.5M in a Sui blockchain exploit. Vaults are frozen, $500K recovered, and the team pledges to cover all user losses.

Volo Protocol, a DeFi platform on the Sui blockchain, suffered a major security breach on April 21. Attackers drained roughly $3.5 million from three vaults. 

The stolen assets included WBTC, XAUm, and USDC. The team acted fast, freezing all affected vaults almost immediately. 

Recovery efforts are already underway, with key ecosystem partners stepping in to help.

Read also: 

How the Volo Exploit Unfolded on the Sui Blockchain

The breach targeted three specific vaults within the Volo ecosystem. 

Once detected, the team alerted the Sui Foundation and notified ecosystem partners to contain further damage. 

Volo confirmed that the remaining vaults carry no shared vulnerability. The roughly $28 million in TVL across other vaults stayed untouched throughout the incident.

Volo moved quickly on the recovery front. Working with partners, the team froze around $500,000 of the stolen assets shortly after the attack. 

In a second update, Volo announced it had blocked the hacker from bridging 19.6 WBTC out of reach. Those funds are no longer under the attacker’s control, and discussions on returning them to the protocol are ongoing.

NAVI Protocol paused operations as a precaution following the news. 

Matrixdock also stepped in to secure its XAUm token, confirming the gold backing remained intact. Deposits across the wider ecosystem were set to resume after checks cleared.

Volo Pledges to Absorb Losses Without Passing Costs to Users

Volo addressed its community directly through a post on X. 

The team stated clearly that it is ready to absorb the full loss. The protocol pledged to avoid passing any costs to its users. A complete post-mortem is in the works and will be published once investigators wrap up their review.

The tone from the team remained focused and transparent. 

Volo said it is working with on-chain investigators and will share a full remediation plan once damage control wraps up. The protocol acknowledged that trust must be earned through action, not words.

DeFi Hacks in April 2025 Cross $600 Million in Losses

This breach adds to a brutal stretch for decentralized finance. 

Losses across DeFi protocols in April have topped $600 million. Several major incidents contributed to that figure.

As reported by Live Bitcoin News, Drift Protocol revealed that a $285 million hack on April 1 traced back to a structured intelligence operation. 

Read more: 

Investigators found that attackers used fake identities and spent months infiltrating the team through in-person networking, starting at a crypto event in fall 2025. 

In a separate case, Rhea Finance lost $7.6 million after attackers used fake token pools to manipulate price oracles in a margin trading exploit.

The Volo incident adds fresh urgency to security discussions across the DeFi space as teams and users assess risk heading into the months ahead.