Term Finance Vault Governance Attack Drains $8.5M

A governance-based attack on decentralized lending protocol Term Finance drained approximately $8.5 million from its vault products, prompting the immediate shutdown of the affected funds. The exploit, which targeted the protocol's Term Meta Vaults, allowed the attacker to siphon roughly 2,843 ETH and 1.68 million USDC, according to analysis from blockchain security firms PeckShield and CertiK. The stablecoin was quickly converted into about 1.68 million DAI.

The attack, which occurred on August 23, 2026, represents a significant portion of the vaults' holdings. Data from DefiLlama indicates the product contained approximately $12.45 million prior to the incident, meaning the attacker successfully removed close to 68% of the total value locked. This nearly wiped out the vaults' Ethereum deposits, which totaled about $8.8 million.

Term Labs, the development team behind the protocol, confirmed the breach and responded by permanently shutting down all Term Meta Vaults. This action cuts off new deposits while still allowing existing users to withdraw their remaining funds. The company emphasized that its preliminary investigation indicates the exploit was confined to the vault...