Term Finance Hit with $8.5M Governance Exploit
The Ethereum-based lending platform Term Finance has suffered significant losses due to an attacker manipulating its governance system. The exploit occurred on August 23, 2026, and resulted in approximately $8.5 million in damages.
According to security researchers from PeckShield and CertiK, the attacker extracted around 2,843 ETH (valued at roughly $6.9 million) and about 1.68 million USDC from Term's strategy vaults. The stablecoins were exchanged for a similar amount of DAI.
The affected products were Term's Meta Vaults and related strategy vaults, which operate on Yearn V3 infrastructure but incorporate a custom governance layer developed by Term Labs.
Term Labs acknowledged the incident promptly in an official statement, noting awareness of a governance exploit impacting the Term vaults. The team confirmed it had irreversibly shut down all Term Meta Vaults and revoked the associated DAO governance roles to permanently block new deposits.