Term Labs Hit by $8.5M Governance Exploit, Vault Funds Drained

Term Labs, a decentralized finance (DeFi) protocol, has suffered an estimated $8.5 million loss due to a governance exploit. The attack did not involve breaking any code but rather manipulating the voting system to drain funds from several vaults.

The attacker gained enough voting power to control four USDC strategy vaults and around 91% of the Ethereum Meta Vault, allowing them to pass their own proposals and move funds to the attacker's wallet.

According to PeckShieldAlert, the attacker used only 2 ETH from Tornado Cash to fund the wallets involved in the attack. This highlights the risk that even audited DeFi protocols can face if their governance system is not well-protected.

The stolen funds were moved to a wallet now holding most of the reported assets. Term Labs has confirmed the incident and stated that its investigation is ongoing, but it has not yet provided a full recovery plan or confirmed how much of the loss can be recovered.