Term Finance Hit by $8.5M Governance Exploit as Attacker Seizes Control of Strategy Vaults

A governance exploit on Term Finance, an Ethereum-based fixed-rate lending protocol, resulted in the loss of approximately $8.5 million on August 23. The attacker managed to gain control of four out of five USDC strategy vaults and roughly 91% control of the Ethereum Meta Vault, allowing them to drain funds to a single wallet address.

The initial funding for the attack came from just 2 ETH sourced through Tornado Cash, which was bootstrapped into enough voting power to commandeer vaults holding millions in user deposits. Term Labs acknowledged the governance issue and indicated the need for further investigation, distinguishing it from a smart contract vulnerability.

This is not the first time Term Finance has faced losses; in May 2025, the protocol lost approximately $1.5 million due to an oracle decimal mismatch during a routine upgrade. The company raised $2.5 million in seed funding in early 2023 under the leadership of founder and CEO Dion Chu.

The governance problem exploited by the attacker did not require any technical wizardry, but rather targeted the democratic machinery used to manage treasuries and upgrade parameters. The vulnerability was architectural, sitting at the intersection of tokenomics, voter apathy, and insufficient access controls on vault management functions.