The Volo Protocol Liquid Staking protocol on the Sui ecosystem has just become the victim of a serious security breach, resulting in approximately $3.5 million worth of assets being withdrawn from vaults. This incident quickly attracted the attention of the crypto community when the project team announced that they would bear all the losses themselves instead of passing the risk on to users, amidst a sharp increase in DeFi hacks in 2026.
According to an official announcement posted on the social media platform X , Volo Protocol confirmed that the attack directly affected vaults containing WBTC, XAUm, and USDC. Immediately after detecting the anomaly, the project notified the Sui Foundation and its partners within the Sui ecosystem and proceeded to freeze all affected vaults to minimize further damage.
The development team emphasized that the remaining vaults were unaffected by the security vulnerability and that approximately $28 million in TVL remained secure. In a reassuring message to the community, the project affirmed that it would absorb the loss itself while striving to protect user rights. Less than 30 minutes after the initial announcement, Volo stated that it had promptly frozen an additional $500,000 in assets related to the exploit, demonstrating a swift response to minimize damage.
Currently, the project has not released details about the exploited vulnerability or the identity of the suspect behind the attack. However, the team's statement emphasizes that trust must be built through concrete actions, and the top priority right now is to investigate, fix, and enhance security.
