How Does Volo Protocol Work?
Volo Protocol is Sui's main liquid staking protocol, letting users stake SUI and get vSUI in return, plus offering yield vaults for BTC and gold tokens. In April 2026, hackers stole $3.5M by compromising a vault admin key through social engineering — not a code bug but a people/process failure. Vaults are still frozen while the team recovers. The protocol is Sui-native and early-stage with a governance token that hasn't launched yet.
TVL
$28M
Sector
Liquid Staking
Risk Grade
C
Value Grade
C
Core Mechanisms
Liquid Staking
vSUI receipt token with decentralized validator delegation
Users deposit SUI and receive vSUI (Volo Staked SUI), a fungible liquid staking token representing their staked SUI plus accrued rewards. The protocol delegates to a set of validators and auto-compounds rewards. Architecture mirrors stETH on Ethereum.
Automated Yield Vault
NovelLeveraged looping strategy vault on NAVI Protocol
Volo Vaults execute one-click multi-step yield strategies: e.g., deposit WBTC as collateral on NAVI, borrow DEEP at ~20% APR, redeposit for leveraged ~42% net yield. This amplifies both yield and risk through recursive borrowing loops. The admin key that was exploited in April 2026 controlled vault fund access.
BTCFi Vault
NovelWBTC and XAUm vault on Sui with NAVI integration
Novel BTCFi offering on Sui: users deposit WBTC or XAUm (tokenized gold) into vaults that automatically deploy capital into NAVI lending/borrowing strategies. The WBTC vault specifically requires bridging Bitcoin assets to Sui, introducing cross-chain bridging risk on top of vault risk.
Governance DAO
VOLO token governance (token not yet launched as of May 2026)
Volo DAO governance framework described in documentation but VOLO token has not formally launched. Distribution model and voting mechanics are undefined, creating uncertainty about who controls protocol parameters and emergency response capabilities.
How the Pieces Interact
Privileged admin key has direct access to vault funds via withdraw_with_account_cap_v2 function. Key compromise (via social engineering or phishing) allows instant drain of all connected vault assets. DEMONSTRATED: $3.5M drained in April 2026.
Recursive borrowing loops amplify losses during market downturns. If WBTC price drops sharply, looped positions may face cascading liquidations across multiple NAVI positions, with automated vault rebalancing potentially accelerating losses.
WBTC vault collateral depends on Bitcoin-to-Sui bridge security. A bridge exploit or WBTC custodian failure would immediately impact vault collateral value. Attacker in April 2026 attempted to bridge stolen WBTC off-chain before being blocked.
Large simultaneous redemptions could create vSUI/SUI peg instability if on-chain liquidity is insufficient. Validator unbonding periods on Sui (typically 1 epoch) limit instant liquidity, creating depeg risk during mass redemptions.
Without a launched governance token, protocol decisions are made by the core team. If the team is anonymous or compromised, parameter changes or emergency responses lack checks and balances. VOLO distribution model could concentrate control post-launch.
What Could Go Wrong
- April 2026 exploit: $3.5M stolen via compromised admin vault key (social engineering); only ~60% recovered — exposes weak operational security controls
- All vaults remain frozen post-exploit with no public timeline for reopening, raising uncertainty about protocol viability
- Vault admin keys represent a centralized trust assumption — any privileged role compromise can drain all connected vaults instantly
- VOLO governance token has not launched; governance rights, token distribution, and economic model are undefined
- Anonymous or low-disclosure team limits accountability; no formal disclosure of key management changes post-incident
Second Admin Key Compromise
ElevatedTrigger: Another vault admin key is compromised before multi-sig controls are enforced
- 1.Admin key compromised via phishing or insider threat — Attacker gains withdraw_with_account_cap_v2 access to all vaults
- 2.All vault funds drained within minutes — $28M in remaining TVL at risk before protocol can freeze
- 3.Protocol cannot absorb second $28M loss — Full protocol insolvency; vSUI holders cannot redeem underlying SUI
- 4.vSUI depegs to zero — All liquid staking positions worthless; DeFi integrations collapse
Risk Profile at a Glance
Overall: C (48/100)
Lower score = safer