DeFi Under Siege: Volo Protocol Loses $3.5M in Latest Hack Wave

by

Another DeFi protocol loses millions in hack days after KelpDAO breachMarkets

What to know:

  • Volo Protocol was exploited, losing about $3.5 million from three vaults holding WBTC, XAUm, and USDC.
  • The protocol froze all vaults, coordinated with the Sui Foundation, and says the remaining $28 million in funds are safe.
  • The incident adds to a wider DeFi security problem, with over $10 billion in total crypto losses from hacks and bridge exploits to date.

It seems like every day brings news of another security flaw in the world of DeFi – decentralized finance built on blockchain technology. Despite being initially seen as a potential replacement for traditional financial systems, these vulnerabilities are actually increasing.

Volo Protocol, a platform on the Sui blockchain, has recently been affected. It allows users to deposit cryptocurrencies like Bitcoin and stablecoins into investment pools called “vaults” to earn rewards. These deposited funds are then used in various ways to generate returns directly on the blockchain.

As a crypto investor, I woke up Wednesday to some worrying news: the protocol had been hacked. They confirmed about $3.5 million worth of crypto was stolen from three of its ‘vaults’. The good news, though, is that the rest of the vaults and the assets in them seem to be safe, according to their post on X.

The team confirmed that the approximately $28 million held in all Volo vaults other than the three affected ones remains secure. They’ve determined the security issue was limited to those specific vaults and doesn’t affect any others. The protocol plans to cover the financial losses itself, rather than asking users to bear them.

The cyberattack targeted digital storage spaces containing various cryptocurrencies, including wrapped bitcoin (WBTC), tokenized gold (XAUm), and the stablecoin USDC. As a result, the platform immediately locked down all storage spaces and is collaborating with the Sui Foundation and blockchain investigators to limit the damage and track the stolen funds.

Following the incident, Volo worked with partners in the crypto space to freeze $500,000 in assets. This means those funds can’t be moved or withdrawn from their digital wallets. However, most of the stolen money is still being investigated.

Growing unease

As a crypto investor, this latest hack is really starting to worry me. We’re seeing more and more exploits in the DeFi space, and it’s making me question how secure these smart contracts actually are. Plus, the timing couldn’t be worse – it’s happening right after the KelpDAO attack where someone made a ton of fake rsETH tokens and stole millions. It’s a bad look for the whole industry and makes you wonder what’s being done to prevent these things from happening.

The recent events have had a widespread impact on the DeFi space, causing problems for several projects. This included Aave, a major lending platform, where users quickly withdrew their funds due to the increased instability.

So far, hacks have caused around $7.78 billion in losses within the decentralized finance (DeFi) space, according to DeFiLlama. Another $2.90 billion has been lost through attacks on ‘bridge’ protocols – systems that move assets between different blockchains. Together, these losses total over $10 billion, which is similar to the value of the top 10 to 15 cryptocurrencies by market capitalization.

Volo plans to share a detailed report explaining what happened and how they fixed it once their investigation is finished.

People involved in decentralized finance (DeFi) are noticing a concerning trend: even though large institutions are increasingly using DeFi, very little of that new money is being invested in making these systems more secure. As a result, security breaches continue to happen frequently.

Read More

2026-04-22 10:53