Term Finance Hit with $8.5M Governance Attack on Ethereum

Term Finance, an Ethereum-based DeFi lending protocol, has suffered a significant loss of approximately $8.5 million due to a governance attack on August 23.

The attacker exploited the protocol's governance system to seize control of vault assets, draining about 2,843 ETH and roughly $1.68 million in stablecoins, according to blockchain security researchers PeckShield.

What's notable is that the incident targeted governance controls rather than a conventional smart-contract vulnerability, highlighting the importance of voting concentration, proposal review, and execution delays as safeguards against such attacks.