Volo Vault
Last changed 2026-11-02 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the trust score was recalculated from the page's findings, 59 → 63. Version history →
Why this score
| Every page starts at | 65 |
| Incidents it suffered (e.g. hacks) | -3.2 |
| Problems around it, caused by others | -2.4 |
| Long-running | +4 |
| Sum | 63 |
- 3 sections set aside: the claims did not hold up in a fact-check, pending correction.
Score: 63/100 (kept between 0 and 100)
How scoring works →Page reliability: Fact-checked 2026-11-02 · 5 of 10 claims confirmed · 5 need better sources
anchored·4GPruZ…EcjoSummary
Volo Vault is a yield-generating vault product operated by Volo Protocol, a BTCFi and liquid staking platform built on the Sui blockchain. In April 2026, three of its vaults were exploited via a compromised admin private key, resulting in approximately $3.5 million in losses across WBTC, XAUm, and USDC holdings. The team committed to absorbing all user losses and ultimately recovered approximately 90% of the stolen funds through coordination with the Sui Foundation, ZachXBT, and ecosystem partners.
Connected Entities
7 entities · 60 linked investigations- Volo Vault→mentioned with→Drift(75%)
- ZachXBT→mentioned with→Bitcoin(65%)
- Volo Vault→mentioned with→ZachXBT(80%)
- Volo Vault→mentioned with→Bitcoin(60%)
- Volo Vault→mentioned with→Sui(70%)
- Sui→mentioned with→ZachXBT(70%)
- Volo Protocol→mentioned with→Sui(70%)
- Volo Protocol→mentioned with→Bitcoin(65%)
- Volo Vault→mentioned with→Volo Protocol(80%)
- Volo Vault→mentioned with→Drift Protocol(80%)
Timeline(8 events)
17 January 2024
NAVI Protocol announces acquisition of Volo liquid staking protocol; Volo TVL at $7.45 million at time of announcement.
7 August 2025
Volo launches BTC Vaults, enabling users to earn yield on wrapped Bitcoin (wBTC) on Sui.
November 2025
Veridise completes formal audit of NAVI-Volo Vault v3 smart contracts (VAR-NAVI-250523-SUI-VOLO-VAULT-V3).
21 April 2026
Attacker uses compromised admin private key to invoke privileged withdrawal function, draining three Volo Vaults of approximately $3.5 million in WBTC, XAUm, and USDC. Attacker address: 0xe76970bbf9b038974f6086009799772db5190f249ce7d065a581b1ac0adaef75.
22 April 2026
Volo freezes all vaults and publicly confirms the exploit. Approximately $500,000 frozen within 30 minutes. Team notifies Sui Foundation and engages ZachXBT and ecosystem partners. Team commits to absorbing all user losses.
22 April 2026
Volo successfully blocks attacker's attempt to bridge out 19.6 WBTC (approximately $2.1 million); funds held by cooperating platforms.
22 April 2026
GoPlus Security and ExVul publish analysis attributing root cause to social-engineering-based admin key compromise, not smart contract vulnerability.
27 April 2026
Volo reports approximately 90% of stolen funds recovered or frozen; net loss estimated at approximately $200,000. Full user compensation pledged from Treasury.
Decision Log
- slot 464345139 · hash 8QVb6HbeFXYygsfnaWC96kAGLpgsqPnejNRyrVAo6WEa
- slot 464345125 · hash EFii2RovMD6Hv6hMBKKTTjPtWW6H8qCybQMdZs8ByBf5
- slot 464345120 · hash HVhzZM8CTrCQXzya2XURYq15wGMKjo3AML8vbTJXP8q2
- slot 455365989 · hash E3jcNb9hw4QRCBqyACa7ezWMTtgum8w6DdN7qSkbiGyU
- slot 422338834 · hash 2jdyQk6CQpU3fDZ2bU9yJogtUtyE1hQPvDNxcenq8Czw
This investigation is cryptographically anchored to the Solana blockchain (5 decisions). 13 of 14 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:16 AM
last updated: 11/2/2026, 3:31:46 AM
5 viewsavoid.net — verified advice for a post-truth world