Term Labs loses $8.5M in governance exploit

Term Labs lost $8.5M after an attacker gained governance control and drained 2,843 ETH and 1.6M DAI. The exploit was due to voting power manipulation, not a code flaw.

Term Labs, an Ethereum-based fixed-rate lending protocol, recently suffered a significant governance exploit, resulting in a loss of approximately $8.5 million. The attacker, initially funded with just 2 ETH from Tornado Cash, quietly accumulated enough voting power to take control of several vaults within the protocol. With this control, the attacker executed proposals that drained around 2,843 ETH and 1.6 million DAI, transferring the stolen assets to a single wallet. Security firms CertiK and PeckShield confirmed the incident, clarifying that the exploit was due to governance manipulation rather than a smart contract vulnerability. Term Labs acknowledged the breach, stating that its vaults were compromised by a governance vulnerability and that a full investigation is ongoing. No recovery plan, reimbursement details, or technical postmortem have been released yet. The incident underscores persistent risks in DeFi governance systems and has prompted Term Labs to assess the full impact of the breach.