Volo DeFi hack on Sui: $3.5M drained, vaults frozen
The Volo DeFi hack on Sui confirmed losses of about $3.5M from selected vaults. Volo said it detected the attack, notified the Sui Foundation and ecosystem partners, and froze the affected vaults. The protocol stressed the exploit was isolated to certain vaults, with about $28M TVL in remaining vaults reported as safe.
The Volo DeFi hack targeted vault assets including WBTC, Matrixdock Gold XAUm, and USDC. Volo plans to absorb the loss and not charge users, while it finalizes remediation and a technical report.
On recovery progress, Volo reported blocking/freeze actions totaling roughly $2M, including about $500k already frozen and an additional block of a 19.6 WBTC bridging attempt to remove funds from attacker control.
For traders, the event adds to near-term DeFi risk concerns, coming after last weekend’s KelpDAO liquid restaking exploit (~$293M). Watch for spillover into Sui liquidity, stablecoin confidence around exposed vaults, and updates on fund return timelines.
Bearish
Bearish for traders because the news reinforces near-term smart-contract and vault-containment risk. The Volo DeFi hack shows that even when an exploit is isolated to certain vaults, the attacker can still move wrapped BTC and stablecoins before containment is complete. The need to freeze/block funds and coordinate recovery also tends to keep market uncertainty elevated.
Short term: expect risk-off flows from Sui-based vault-style products holding WBTC/USDC, potentially pressuring TVL and liquidity and increasing volatility in DeFi tokens/infrastructure exposure (sentiment-wise for SUI markets).
Long term: if Volo’s recovery is successful and its technical report convinces users that the vulnerability is non-systemic, the impact could fade. However, the timing—right after the KelpDAO incident—suggests investors may continue to demand tighter security and faster incident response across DeFi vaults and cross-chain/bridge routes.