Term Labs Drained for $8.5 Million in Major DeFi Governance Exploit
DeFi fixed-rate lending protocol Term Labs suffered an $8.5 million drain following a governance vault exploit. The attacker extracted thousands of Ether and USDC before swapping funds via DAI and Tornado Cash. The attack brings total DeFi security losses for August past $27 million.
DeFi protocol Term Labs took an $8.5 million hit over the weekend after an attacker exploited a governance mechanism across its liquidity vaults. On-chain analysis from PeckShield shows the attacker pulled 2,843 ETH and 1.68 million USDC out of the protocol, stripping away a massive chunk of its total locked capital.
The malicious wallet was initially funded with 2 ETH sourced from Tornado Cash to break the deposit trail. After draining the vault, the exploiter quickly swapped the USDC into DAI to consolidate the funds, leaving the team investigating which specific governance function was breached.
This security incident pushes total crypto protocol losses for August above $27 million across 18 separate events. While governance vector attacks remain less common than smart contract bugs, their severe impact continues to highlight deep structural vulnerabilities across automated DeFi systems.