Volo recovers practically all stolen belongings after its $3.5M Sui vault exploit, slicing web losses to $60K. XAUm coordination with MatrixDock nonetheless ongoing.
Volo, the DeFi protocol on the Sui blockchain that suffered a $3.5 million vault exploit final week, mentioned it has now recovered the remaining roughly 64.9 ETH the attacker obtained. The announcement got here by way of @volo_sui on X, marking the protocol’s fifth restoration replace.
Whole web loss from the incident now stands at roughly $60,000.
The Attacker Recognized, Funds Contained
That determine is a pointy drop from the place this stood days earlier. As @volo_sui posted on X on April 25, the staff had already recovered 90% of stolen belongings by that time, changing them again to stablecoins and bridging them to Sui. The perpetrator had been recognized.
The exploit had hit three vaults, pulling USDC, XAUm, and WBTC. Round half of the WBTC and XAUm holdings have been swapped into USDC, bridged to Ethereum, then transformed to ETH. That’s the usual playbook. Transfer it, shape-shift it, make it more durable to hint.
Besides it didn’t work.
Volo intercepted 19.6 WBTC on the LayerZero bridge earlier than it cleared. Per the April 25 put up on X, these funds have since been reappropriated in full on Ethereum. The Sui Basis stepped in to unlock 100.6 XAUm, which returned to Volo’s custody.
One Vault Nonetheless Ready
The XAUm piece is the final shifting half. Not all of it, only one portion.
In response to @volo_sui on X, the remaining 115 XAUm the attacker swapped on Sui is a distinct downside. Skinny on-chain liquidity makes a DEX swap of that dimension unworkable. Volo mentioned it’s coordinating straight with @MatrixDock to accumulate the quantity. The XAUm vault restart will take longer than the others. No date given.
All different stolen vaults, the put up confirmed, are able to be replenished. They are going to be introduced again on-line shortly.
Volo mentioned it can cowl the $60K out of its personal treasury. Customers will probably be made complete, no exceptions. The sooner replace from April 25 had already dedicated to absorbing regardless of the remaining loss determine got here to, on the time nonetheless sitting close to $200K.
The April 2026 crypto hack atmosphere has been brutal by most measures, with whole business losses crossing $620 million throughout the month. Volo’s end result sits in another way in opposition to that backdrop. Most protocols in breach conditions don’t get well 98% of what was taken.
The $60K is what’s left. The treasury is protecting it.