What to know:
- Term Labs lost an estimated $8.5 million after attackers exploited governance controls affecting Ethereum Vaults.
- The attacker currently holds approximately 2,843 ETH and 1.6 million DAI from stolen assets.
- The exploit highlights governance risks, following $20 million BonkDAO and $1.5 million Term incidents.
Term Labs has suffered an estimated $8.5 million loss after an attacker exploited governance controls affecting its Ethereum Vaults. The security analysis firms CertiK and PeckShield detected this activity on August 23, and Term Labs confirmed that governance vulnerability had been used. Further investigation is in process.
The hacker’s account contains approximately 2,843 ETH and 1.6 million DAI most of the assets stolen. According to the market valuation, the amount of ETH in the Ethereum vault equals about $7.1 million. However, in contrast to smart contract vulnerabilities, the information available suggests that the attacker had used governance control to take control of Ethereum vaults.
Term Finance is an Ethereum-based protocol of fixed-rate lending provided by Term Labs. This protocol uses vault infrastructure to manage the liquidity and lending strategies. According to a recent post, there are multiple governance roles and risk controls, and one of them is vault governance where liquidity providers have control over important protocol decisions.
Also Read | ONDO Price Setup Signals Reversal to $1.40 as Ondo Perps Crosses $100M
Governance Risks Put Ethereum Vaults Under Pressure
The recent attack once again underscored the importance of paying close attention to governance risks in DeFi protocols. An attacker could get control over vaults if he had enough voting power to authorize certain actions or modifications, leading to redirection of assets from Ethereum Vaults.
The timing adds significance because Term Finance recently introduced Term V2, describing it as a new architecture for fixed-rate DeFi markets. The protocol has also previously experienced a separate $1.5 million incident in 2025 involving an erroneous price-feed update, which it said was remediated. The latest breach therefore places renewed focus on operational safeguards.
Recent Governance Attacks Raise DeFi Security Concerns
Term Labs is not the only protocol exposed to governance-based attacks. In July, BonkDAO lost roughly $20 million after an attacker acquired enough BONK tokens to meet its quorum requirement and pass a proposal transferring treasury assets. The attacker reportedly spent about $4.4 million to obtain voting power, demonstrating how low participation can weaken token-based governance.
Another 2026 incident involving the TOP protocol similarly demonstrated the danger of governance structures without effective execution delays. Attackers gained majority voting power and executed a malicious proposal rapidly, limiting the community’s ability to intervene. These cases reinforce the importance of timelocks, quorum design, emergency controls, monitoring, and limits on governance actions involving treasury funds.
For Term Labs, the immediate priority is determining how voting power was obtained, which vaults were affected, and whether additional assets remain exposed. Its existing documentation describes monitoring of access-controlled functions and incident-response procedures, including containment and recovery measures. The investigation will determine whether governance parameters or implementation changes are required before affected operations resume.
Also Read | AVAX Price Signals Bullish Breakout to $8.50 as Institutional Adoption Soars
Be the first to comment