0xtracer @0xtracer_ - Twitter Profile

Volo confirmed ~$3.5M was removed from 3 vaults. On-chain, this looks less like a typical smart contract exploit and more like a possible privileged Keeper/key-opsec failure: both attack txs appear to be signed by Volo’s Keeper, following the normal vault operation path. The bigger issue may be blast radius. The affected vaults seem to have had loss-tolerance/risk checks loose enough for a Keeper-level actor to cause major losses while still passing controls. USDC was then bridged via CCTP within roughly a minute.

Volo

@volo_sui

3 months ago

🔒 Security Incident Update - Volo Protocol We want to address our community directly and transparently about a security incident that occurred earlier today. Rest assured, Volo is prepared to absorb any loss. What happened: An exploit resulted in the removal of approximately $3.5M in assets (WBTC, XAUm, and USDC) from Volo Vaults. We detected the attack, immediately notified the Sui Foundation and ecosystem partners to contain the damage, and froze the vaults to prevent any further exposure. Current status: 🔹All Vaults are currently frozen pending a full post-mortem and remediation 🔹The remaining Volo Vaults carry no shared vulnerability and are safe 🔹We are actively working with on-chain investigators and ecosystem partners on further recovery 🔹A full post-mortem will be published once the investigation is complete What this means for you: The ~$28M in TVL across all other Volo vaults is safe. The exploit was isolated to 3 specific vaults, and we have confirmed no shared attack vector exists with the remaining vaults. On absorbing the loss: We want to be clear: Volo is prepared to absorb this loss. We will do our best not to pass this to our users. We are in damage control mode now, but once that’s done, we will work out a remediation plan, and a full breakdown will be shared shortly. We understand that trust is earned, and right now, we are focused entirely on actions. Thank you for your patience and continued support. The Volo Team

56

382

58

82

165K

0

1

0

66