Volo, an Sui ecosystem protocol, released a statement on the X platform confirming that a security vulnerability occurred, resulting in roughly $3.5 million in assets being stolen from three specific vaults, involving WBTC, XAUm, and USDC. Volo said it notified the Sui Foundation and ecosystem partners immediately after detecting the attack, freezing all vaults to prevent further losses; Volo pledged to cover all losses and not to hold users responsible for anything.
Attack Scope and Current Vault Status
According to the statement Volo posted on X, this exploit was limited to three specific vaults. The stolen assets include WBTC, XAUm, and USDC, totaling roughly $3.5 million; the remaining Volo vaults’ approximately $28 million in TVL has been confirmed to be secure, and there is no evidence of shared attack pathways.
The statement notes that all vaults are currently frozen, pending further decisions after a complete post-incident analysis and the completion of the vulnerability fix. Volo is actively working with on-chain investigators and ecosystem partners to carry out efforts to recover funds, and plans to publish a complete post-incident analysis report after the investigation is finished.
Volo’s Loss-Coverage Commitment and Next Steps
According to Volo’s statement, Volo said it is “prepared to take on this loss and will do its best to ensure that users bear no responsibility,” and plans to develop a remediation plan after crisis handling is complete and publish the detailed plan.
Frequently Asked Questions
What is the amount of loss and what assets are involved in this Volo security vulnerability?
According to Volo’s statement on X, this security vulnerability resulted in roughly $3.5 million in assets being stolen from three specific vaults, involving WBTC, XAUm, and USDC. The remaining vaults’ approximately $28 million in TVL has been confirmed to be secure, and there is no shared attack pathway.
Does this attack affect all of Volo’s vaults?
According to Volo’s statement, this vulnerability was limited to three specific vaults. The other Volo vaults have been confirmed secure. All vaults are currently frozen, pending a complete post-incident analysis and vulnerability remediation.
What commitment has Volo made to affected users?
According to Volo’s statement, Volo has clearly stated that it is prepared to assume all losses from this incident, pledging that users will not bear any responsibility. Volo also plans to publish the remediation plan and a complete post-incident analysis report after the crisis response is completed.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
Circle, OSL Expand USDC Access as Asia Cross-Border Demand Grows
Institutional access to digital dollar liquidity is growing as cross-border settlement demand rises and stablecoins gain a larger role in market infrastructure. OSL Group and Circle are expanding USDC use across trading, payments, and settlement in Asia.
Key Takeaways:
OSL Group expanded USDC acc
Coinpedia2h ago
Pornhub Switches Creator Payouts from USDT to USDC for Greater Reliability
Pornhub swapped creator payouts from USDT to USDC, citing reliability and MiCA compliance; older USDT-PayPal ties and TronLink-based partnerships have been removed.
Abstract: Pornhub replaced USDT payouts with USDC for creators, arguing USDC is more reliable and MiCA-compliant. The move ends PayPal-USDT ties and TronLink-based payment infrastructure, and those partnerships were removed from the creator payment page.
GateNews3h ago
Circle Proposes Emergency Rate Overhaul for Aave's Frozen USDC Pool
Summary: Circle proposes an emergency Aave V3 USDC overhaul, lifting Slope 2 to ~40% to restore healthy utilization (target ~85%), with max rate rising to ~48%, arguing borrowers ignore rates; also suggests pausing the USDC risk oracle.
Abstract: Circle has urged an emergency overhaul of Aave V3's USDC pool after four days at near-6% idle liquidity and 99.87% utilization following the KelpDAO exploit. The plan would immediately raise Slope 2 for USDC deposits from about 10% to 40%, followed by governance ratification of a 50% target within a week. The aim is to attract supply and restore balanced utilization, with a move to a higher max supply rate (about 48%) at full utilization. Liao argues current borrowers use USDC borrowing as a queue-bypass mechanism and are insensitive to current rates, making supply-focused incentives essential. The proposal also recommends pausing the USDC Risk Oracle due to past underperformance. Circle’s stance is notable because a stablecoin issuer is essentially saying the market for its asset on Aave is broken.
CryptoFrontier7h ago
USDC Treasury Mints 200M USDC on Ethereum, Worth ~$199.9M
Summary: USDC Treasury minted 200M USDC on Ethereum at 22:00 UTC; worth about $199.9M, per Whale Alert.
Abstract: A Gate News update reports that the USDC Treasury minted 200 million USDC on the Ethereum network at 22:00 UTC, with Whale Alert corroborating the mint. The new supply is valued at roughly $199.9 million, illustrating a substantial increase in USDC issuance.
GateNews14h ago
RedotPay Integrates Sui and USDC-Sui, Expanding Payments to 100+ Countries
RedotPay now supports SUI and USDC-Sui on the Sui network, enabling faster global payments for 130M merchants and 7M customers, with scalable cross-border transactions bridging crypto and commerce.
Abstract: RedotPay has added support for SUI and USDC-Sui on the Sui network, enabling seamless payment processing and global payouts across its ecosystem. Serving more than 130 million merchants in over 100 countries and about 7 million customers, the platform aims to offer faster, more scalable cross-border payments and broader blockchain-enabled financial access. By integrating SUI and USDC-Sui, RedotPay seeks to simplify sending and receiving payments worldwide while ensuring secure, efficient transactions that bridge digital assets with real-world commerce.
GateNews20h ago
Whale Deposits $2M USDC to Hyperliquid, Buys 50,080 HYPE at $39.94 Average
Gate News message, April 22 — According to Onchain Lens, a whale deposited 2 million USDC to Hyperliquid and purchased 50,080 HYPE at an average price of $39.94 per token.
GateNews23h ago
