Term Labs Loses $8.5M as Governance Exploit Drains Ethereum Vaults

Term Labs has lost an estimated $8.5 million after an attacker gained enough governance power to execute malicious proposals against vaults operated by the Ethereum-based fixed-rate lending protocol.

Term Labs confirmed the governance exploit on Sunday and began investigating the affected vaults. The attacker-controlled address now holds approximately 2,843 ETH and 1.6 million DAI, placing the observed proceeds near $8.5 million at current prices.

Wallets connected to the operation were funded through Tornado Cash before the attacker accumulated governance voting power. The attack then used Term’s voting process to authorize transactions against protocol vaults, turning control of governance into control over deposited assets rather than exploiting Ethereum itself.

Attacker Used Governance to Reach Term Vault Assets

TERM is the governance token for Term Finance, with token holders able to participate in decisions affecting the protocol. Term operates fixed-rate lending markets and vault products that deploy capital across onchain lending strategies.

The attack targeted the governance path controlling Term vaults. The attacker accumulated voting power, submitted proposals capable of moving vault assets and secured enough support for the transactions to execute.

The stolen assets included roughly 2,843 ETH alongside stablecoins. About 1.68 million USDC was moved during the attack and subsequently converted into DAI, leaving the identified address with approximately 1.6 million DAI alongside the ETH.

The use of acquired voting power separates the Term drain from contract-level attacks such as Sunday’s KiiChain exploit, where an EVM-module vulnerability allowed funds to leave the chain through Hyperlane before validators halted the network.

BONK Lost $20M Through Another Governance Capture

BonkDAO lost roughly $20 million in BONK on July 6 after an attacker accumulated enough voting power to pass a malicious proposal through Solana’s Realms governance system.

The attacker spent about $4 million building the required BONK position before a proposal transferred 4.426 trillion BONK from the DAO treasury. BONK subsequently fell nearly 40% as the stolen tokens moved through the market.

A similar takeover hit the small Ethereum-based TOP protocol in June. An attacker withdrew about 664 ETH from Tornado Cash, bought more than half of TOP’s 16,384-token supply and used that majority to approve a mint of 10 billion new tokens. Roughly $1.6 million was extracted from a Balancer pool after the newly created supply was sold. The governance majority could execute immediately because TOP lacked a timelock between approval and execution.

Term Investigates as DeFi Exploits Accelerate

The $8.5 million Term drain comes days after Maya Protocol lost roughly $1.7 million when faulty accounting allowed an attacker to manipulate liquidity positions and extract assets. Maya responded with a network halt while developers isolated the affected path.

Term has not published a final transaction-by-transaction postmortem, recovery plan or confirmed reimbursement process. Its latest update places the affected Term vaults under active investigation, while the identified attacker address continues to hold approximately 2,843 ETH and 1.6 million DAI.

The post Term Labs Loses $8.5M as Governance Exploit Drains Ethereum Vaults appeared first on Crypto Adventure.