Cryptopotato Volo Protocol Suffers $3.5M Exploit on Sui Network Vaults
Article Content
- •Volo Protocol lost $3.5 million due to an exploit affecting three vaults.
- •The protocol has frozen the affected vaults and is working on recovery efforts.
- •Volo is committed to absorbing the losses and not impacting users financially.
Volo Protocol, a liquid staking platform on the Sui network, experienced a security breach resulting in a loss of approximately $3.5 million from three vaults containing Wrapped Bitcoin (WBTC), Matrixdock Gold (XAUm), and USDC. The protocol detected the exploit and immediately froze the affected vaults to mitigate further losses, confirming that the remaining vaults, valued at around $28 million, were secure. Recovery efforts have successfully blocked or frozen roughly $2 million of the stolen funds, including $500,000 shortly after the attack. Volo has committed to absorbing the financial loss and not passing it on to users while working with ecosystem partners for recovery. The incident is part of a troubling trend in DeFi, with multiple significant exploits occurring in April 2026, including a $292 million breach of KelpDAO. A detailed post-mortem of the incident is forthcoming.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Lazarus and Kelp DAO in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails… 
Critical PHP Vulnerabilities Exploited Before Public Disclosure Two critical vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were exploited before their public disclosure on October 21, 2026. Amazon Threat Intelligence reported that attempts to exploit these vulnerabilities began on October 17, 2026, targeting its MadPot honeypot network. Both…