All news is verified and thoroughly reviewed by leading blockchain experts and seasoned industry insiders.
- Volo said the $3.5 million vulnerability affected three isolated vaults including WBTC, XAUm, and USDC.
- The Sui-based protocol said about $28 million in total value locked across other vaults remains safe and user losses will not be passed through.
Another week, another DeFi exploit. This time, the damage fell on Volo, a protocol built on the liquid staking protocol butWhich said the attack drained about $3.5 million from a limited portion of its system.
In a statement to publish On Day X on Wednesday, the team said the exploit affected select vaults containing assets including Bitcoin wrappedMatrixdock Gold XAUm and USDC. Volo said it discovered the attack, notified the Sui Foundation and ecosystem partners, and collected the affected vaults to prevent further losses.
Vuolo says the damage was contained in three isolated vaults
The protocol’s first task now is to reassure users that the hack has not spread further. According to the team, approximately $28 million worth of TVL across other vaults remains secure, with the exploit limited to three isolated vaults and no common vulnerability identified so far.
These details are important. in Decentralized financeThe first question after any exploit is rarely how much to lose. Whether the failure is local or systemic. Folau is clearly trying to point out the former.
The team also said that it plans to absorb the losses itself instead of passing them on to users, although it has not yet finalized the processing structure. This is not a trivial commitment, especially for a protocol of this size. This may help stabilize confidence in the short term, but it also raises the next obvious question, namely how losses will actually be covered.
The exploit occurs at a bad moment for DeFi
Timing, in this case, is part of the story. The Volo hack arrives a few days later Kelp has been exploited For approximately $293 million, an event that has already shaken up parts of the broader ecosystem and heightened concerns about liquid storage and infrastructure recovery.
Volo itself operates in the same broad category. Users stake SUI and receive VoloSUI (VSUI) in return, a model designed to maintain capital productivity while preserving liquidity.
This design has become popular across franchises, but it also continues to lure attackers towards the same pressure points. For now, Fulu says the blast radius was limited. However, the larger pattern is difficult to ignore. DeFi’s security is once again being tested not in theory, but by how many protocols can survive a week like this without users deciding they’ve seen enough.
