Verify a decision

{"actor":"system:backfill","investigation_id":"7b231e4d-87b8-4e9b-a6ab-480fa5c4a1dd","kind":"publish","page_slug":"volo-vault","published_at":"2026-05-26T18:30:19.312Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Volo Vault","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://news.bitcoin.com/volo-protocol-loses-3-5-million-in-sui-blockchain-exploit-blocks-wbtc-bridge-attempt/","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/volo-defi-3-5m-exploit-vault-attack-recovery","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/markets/2026/04/22/another-defi-protocol-loses-millions-in-hack-days-after-kelpdao-breach","type":"other","url":""},{"credibility":3,"name":"https://www.banklesstimes.com/articles/2026/04/22/volo-protocol-confirms-3-5m-sui-vault-exploit-500k-already-frozen/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://phemex.com/news/article/volo-recovers-90-of-stolen-funds-after-35m-exploit-76447","type":"other","url":""},{"credibility":3,"name":"https://themarketperiodical.com/2026/04/23/crypto-hack-volo-recovers-2m-of-exploited-funds/","type":"other","url":""},{"credibility":3,"name":"https://thecurrencyanalytics.com/stable-coins/volo-protocol-loses-3-5-million-in-vault-exploit-team-pledges-full-user-reimbursement-254311","type":"other","url":""},{"credibility":3,"name":"https://finance.yahoo.com/markets/crypto/articles/sui-crypto-defi-protocol-volo-154550226.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://news.bitcoin.com/volo-protocol-loses-3-5-million-in-sui-blockchain-exploit-blocks-wbtc-bridge-attempt/","type":"other","url":""},{"credibility":3,"name":"https://www.cryptobreaking.com/volo-exploit-raises-security-concerns/","type":"other","url":""},{"credibility":3,"name":"https://cryptorank.io/news/feed/63a0c-volo-protocol-sui-exploit-details","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://news.bitcoin.com/volo-protocol-loses-3-5-million-in-sui-blockchain-exploit-blocks-wbtc-bridge-attempt/","type":"other","url":""},{"credibility":3,"name":"https://veridise.com/wp-content/uploads/2025/11/VAR-NAVI-250523-SUI-VOLO-VAULT-V3.pdf","type":"other","url":""},{"credibility":3,"name":"https://medium.com/@navi.protocol/navi-protocol-acquires-liquid-staking-protocol-volo-55ca7925f7c9","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/@navi.protocol/navi-protocol-acquires-liquid-staking-protocol-volo-55ca7925f7c9","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/volo","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/markets/2026/04/22/another-defi-protocol-loses-millions-in-hack-days-after-kelpdao-breach","type":"other","url":""},{"credibility":3,"name":"https://www.cryptobreaking.com/volo-exploit-raises-security-concerns/","type":"other","url":""},{"credibility":3,"name":"https://ambcrypto.com/volo-protocol-suffers-3-5-mln-exploit-in-aprils-third-crypto-hacking-incident/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[]}],"sources_used":[],"summary":"Volo Vault is a yield-generating vault product operated by Volo Protocol, a BTCFi and liquid staking platform built on the Sui blockchain. In April 2026, three of its vaults were exploited via a compromised admin private key, resulting in approximately $3.5 million in losses across WBTC, XAUm, and USDC holdings. The team committed to absorbing all user losses and ultimately recovered approximately 90% of the stolen funds through coordination with the Sui Foundation, ZachXBT, and ecosystem partners.","timeline":[{"date":"2024-01-17","event":"NAVI Protocol announces acquisition of Volo liquid staking protocol; Volo TVL at $7.45 million at time of announcement.","source":""},{"date":"2025-08-07","event":"Volo launches BTC Vaults, enabling users to earn yield on wrapped Bitcoin (wBTC) on Sui.","source":""},{"date":"2025-11-01","event":"Veridise completes formal audit of NAVI-Volo Vault v3 smart contracts (VAR-NAVI-250523-SUI-VOLO-VAULT-V3).","source":""},{"date":"2026-04-21","event":"Attacker uses compromised admin private key to invoke privileged withdrawal function, draining three Volo Vaults of approximately $3.5 million in WBTC, XAUm, and USDC. Attacker address: 0xe76970bbf9b038974f6086009799772db5190f249ce7d065a581b1ac0adaef75.","source":""},{"date":"2026-04-22","event":"Volo freezes all vaults and publicly confirms the exploit. Approximately $500,000 frozen within 30 minutes. Team notifies Sui Foundation and engages ZachXBT and ecosystem partners. Team commits to absorbing all user losses.","source":""},{"date":"2026-04-22","event":"Volo successfully blocks attacker's attempt to bridge out 19.6 WBTC (approximately $2.1 million); funds held by cooperating platforms.","source":""},{"date":"2026-04-22","event":"GoPlus Security and ExVul publish analysis attributing root cause to social-engineering-based admin key compromise, not smart contract vulnerability.","source":""},{"date":"2026-04-27","event":"Volo reports approximately 90% of stolen funds recovered or frozen; net loss estimated at approximately $200,000. Full user compensation pledged from Treasury.","source":""}]},"v":1}