Volo Protocol suffers $3.5 mln exploit in April’s third crypto hacking incident

Blockchain technology adoption has reached a record high in 2026, amid increased regulatory clarity and institutional adoption.

The rapid rise in technology, however, has created significant vulnerabilities, and hackers have evolved as well. In 2026, crypto hacking incidents have become rampant, and the Volo Protocol is the latest victim.

Volo Protocol exploited

Volo Protocol on the Sui blockchain suffered a security breach, draining $3.5 million in WBTC, XAUm, and USDC from three vaults. The hack also saw $230k in liquidity losses. 

The team quickly froze 16 vaults, blocked the WBTC bridge, and recovered roughly $500,000 in stolen funds. Equally, the team pledged to cover all the losses without charging users. 

Despite the security incident, over $28 million in other vaults stayed safe, as SUI’s design limited the broader damage. The Volo exploit is the third incident so far in April. In fact, in 2026, DeFi protocols have lost more than $786 million to hacks and exploits. 

April saw two major incidents: Kelp DAO was drained of $299 million, while Drift Protocol lost $285 million. DefiLlama data shows that April 2026 has recorded over $620.5 million in total hacking losses. 

Including all of 2026 losses, the crypto market has lost over $786 million, outpacing the total of full-year hacks since 2023. 

Amid these rising incidents, private key compromises dominate, accounting for 46.27% of total hacks, according to Defillama data.

However, access control exploits, signature exploits, and safe multisignature wallet phishing exploits have jumped significantly. 

Rising crypto hacks affect regulation and adoption

The rising number of security incidents affecting crypto poses a significant threat to crypto adoption and regulatory progress. Ryan Rugg, global head of Digital Assets at Citi Treasury and Trade Solutions, argued that hacks could delay institutional adoption of DeFi. 

Ruggs argued that the security incidents would take some of the market’s confidence out. Thus, institutional investors are likely to consider a firm’s ability to implement security at every layer. 

Therefore, the future of DeFi could look less like a departure from TradFi and more like an extension of it. 

Additionally, regulatory bodies will enforce stricter policies to protect user funds, such as asset safeguarding and insolvency rights. MICA brings this to light, ensuring user funds are kept separately. 

Similarly, regulations will require crypto firms to adhere strictly to operational resilience standards, especially in custody controls. 

Final Summary

• Volo Protocol on the Sui blockchain was exploited for $3.5 million in WBTC, XAUm, and USDC. 
• Crypto hacks have exceeded $786 million in 2026, with April recording $620.5 million in total hacking losses.