Term Finance Suffers $8.5M Loss in Ethereum Governance Attack

Term Finance, an Ethereum-based DeFi lending protocol, suffered a significant loss of $8.5 million due to a governance attack on August 23. The attacker exploited the protocol's governance system, accumulating enough power to approve proposals that granted control over affected vaults.

The incident targeted governance controls rather than a conventional smart-contract vulnerability, making low participation and concentrated voting power central to the attack. According to blockchain security researchers, PeckShield estimated that the attacker drained 2,843 ETH, valued at approximately $6.87 million, and 1.68 million USDC from the protocol.

The funding trail does not identify the attacker, but it is reported that they swapped the USDC for roughly 1.68 million DAI while using Tornado Cash to receive 2 ETH. Term Labs acknowledged the incident, stating 'We are aware of a governance exploit impacting Term vaults,' and promised to release more information after investigating.