Ethereum Governance System Exploited in $8.5M Term Finance Heist

A recent attack on Term Finance, a decentralized finance (DeFi) lending and borrowing protocol on Ethereum, has drained approximately $8.5 million from the network.

The attacker exploited a weakness in Term Finance's DAO governance system by buying a large portion of the governance tokens at a low cost, giving them majority voting power.

With this control, the hacker submitted and approved malicious governance proposals, allowing them to access users' assets stored in the protocol's vaults.

The attacker reportedly funded the operation with 2 ETH sourced through Tornado Cash, which was then used to swap tokens for approximately 1.68 million DAI.

This attack is just one of several high-profile incidents affecting Ethereum in recent months, contributing to a decline in price and raising concerns about the security of the network.