Volo, a structured-yield protocol on Sui, says an exploit drained about $3.5 million from three vaults holding WBTC, XAUm, and USDC, adding another security incident to an already rough week for DeFi markets.

What happened

In Volo's initial incident statement, the team said it detected the attack, froze its vaults, and contacted the Sui Foundation plus other ecosystem partners to help contain the damage. The protocol said the exploit was isolated to three specific vaults and that roughly $28 million in TVL across the rest of its vaults remained safe.

A follow-up update from Volo said partners had already frozen about $500,000 tied to the breach. CoinDesk separately reported the same asset mix and loss estimate, citing Volo's public statements and the protocol's response efforts.

Why it matters

The most important detail here is not a promise of instant recovery. It is that Volo says it is prepared to absorb the loss rather than push it directly onto users, while it works through remediation and a full post-mortem.

That is still an unproven situation, and the protocol's claim that other vaults share no common vulnerability will need to hold up under outside scrutiny. But the incident shows how quickly confidence can deteriorate after clustered exploits, especially when users are already on edge from recent cross-protocol losses elsewhere in DeFi.