Term Finance Suffers $8.5M Loss After Governance Exploit

Term Finance's decentralized lending protocol suffered an estimated $8.5 million loss due to an exploit of its governance control over strategy vaults, according to blockchain security monitoring firms PeckShield and CertiK. The attacker allegedly gained control by acquiring a majority of the governance token 'cheaply' and passing proposals to seize control of Term's vaults.

The incident highlights a recurring risk in DeFi: weaknesses around vault governance and upgrade paths can still lead to large losses even when a lending protocol's core markets continue to operate. The attack involved converting USDC into DAI, resulting in approximately 2,843 ETH and 1.68 million USDC being drained.

Term Labs has shut down the affected vaults and revoked their DAO governance roles to prevent further deposits. The company stated that it had taken emergency steps to limit damage, but emphasized that its investigation is ongoing to determine the full scope of what was impacted.