Term Labs Loses $8.5M in Governance Exploit

Term Labs, the creator of Term Finance, a decentralized lending protocol for fixed-rate ETH loans, has suffered an exploit that resulted in the loss of $8.5M in ETH and DAI.

The attack occurred due to a governance exploit, where the attacker held 100% of the governance token and was able to use their influence to drain funds from five USDC lending vaults.

According to on-chain data, the attacker's wallets were funded with 2 ETH coming from Tornado Cash, which has been linked to previous exploits by DPRK hackers.

The attack comes just days after high-profile exploits against Maya Protocol and The Sandbox, and highlights the vulnerability of governance mechanisms in Web3 protocols.