Volo, the liquid staking protocol operating on the Sui blockchain, has unveiled its fourth recovery plan update following a recent security breach. The protocol has demonstrated remarkable agility and transparency in addressing the incident, reassuring its community that user funds are safe and a comprehensive resolution is underway.
Rapid Response and Significant Fund Recovery
On April 22, Volo experienced a security breach that initially compromised approximately $3.5 million across Wrapped Bitcoin (WBTC), Matrixdock Gold (XAUm), and Circle’s USDC held in three separate vaults. The team swiftly identified the perpetrator and contained the attack's impact, acting quickly to freeze an initial $500K in compromised assets. Through an intensive recovery effort, Volo, with assistance from the Sui Foundation, successfully recovered an impressive 90% of the stolen funds. These recovered assets have since been converted back to stablecoins and safely bridged back to Sui. Specific actions included intercepting 19.6 WBTC during a LayerZero bridge transfer, unlocking and returning 100.6 XAUm, and preventing further loss of USDC.
Full User Compensation and Future Stability
Following the successful recovery, Volo has calculated the net loss from the attack to be roughly $200K. The protocol has taken full responsibility for the incident and has committed to compensating all affected users in full from its existing Treasury balance, ensuring no user will incur any losses. Volo's proactive measures also included blocking the attacker's wallets across major platforms and freezing an additional $2 million in funds. The team is now preparing to release a "full back-to-business plan," solidifying its commitment to long-term security and stability, and reinforcing user trust in the platform's resilience.
