Volo Protocol Hit by $3.5 Million Exploit in April's Third Major Crypto Hack
Blockchain adoption has climbed to a record high in 2026, helped by clearer regulation and growing institutional participation. Security risks have risen in parallel, and hacking activity across crypto has intensified.
Volo Protocol, a DeFi project on the Sui blockchain, became the latest target after an attacker drained $3.5 million in WBTC, XAUm and USDC from three vaults. The incident also resulted in about $230,000 in liquidity losses.
In response, the team froze 16 vaults, blocked the WBTC bridge and said it recovered roughly $500,000 of the stolen assets. Volo also pledged to make users whole without imposing charges. The project said more than $28 million held in other vaults remained secure, citing Sui's design as limiting broader contagion.
The Volo exploit marks the third major incident reported in April. DefiLlama data shows April 2026 hacking losses have topped $620.5 million, driven by two large attacks: Kelp DAO, which was drained of $299 million, and Drift Protocol, which lost $285 million. Across 2026, DeFi protocols have lost more than $786 million to hacks and exploits, already exceeding the full-year totals recorded since 2023.
DefiLlama also indicates private key compromises remain the largest category, accounting for 46.27% of losses. At the same time, access-control flaws, signature-related exploits and phishing targeting safe multisignature wallets have risen sharply.
Security breaches are increasingly viewed as a headwind for adoption and regulation. Ryan Rugg, global head of Digital Assets at Citi Treasury and Trade Solutions, said repeated hacks could slow institutional uptake of DeFi by undermining market confidence and elevating scrutiny around end-to-end security controls.
Regulators are also expected to tighten requirements aimed at protecting customer assets, including safeguarding rules and insolvency protections. MiCA highlights this approach by requiring segregation of client funds. Crypto firms may also face stricter operational-resilience expectations, particularly around custody and control frameworks.
Summary: Volo Protocol on Sui was exploited for $3.5 million in WBTC, XAUm and USDC. Crypto hacking losses have exceeded $786 million in 2026, with April alone recording $620.5 million in losses.
