Term Labs' $8.5M Governance Exploit Exposes Ethereum Vault Vulnerabilities

Term Labs has suffered an estimated $8.5 million loss due to a governance exploit affecting its Ethereum Vaults on August 23.

The attack saw an attacker take control of vaults, draining approximately 2,843 ETH and 1.6 million DAI from the protocol's account, with the stolen ETH valued at around $7.1 million at market rates.

Term Finance is a lending protocol provided by Term Labs that utilizes Ethereum Vaults to manage liquidity and lending strategies, which are controlled through governance roles and risk controls.

The attack highlights the importance of paying close attention to governance risks in DeFi protocols, as an attacker could gain control over vaults if they had enough voting power to authorize certain actions or modifications, leading to asset redirection from Ethereum Vaults.