Term Labs Suffers $8.5 Million Governance Exploit

Blockchain security firms CertiK and PeckShield identified the unauthorized transfers, noting that the attacker siphoned approximately 2,843 ETH and 1.68 million DAI. PeckShield traced the initial funding for the exploit to a Tornado Cash transaction, a common method used to obscure the origin of funds. Despite these findings, Term Labs has not confirmed the total loss figure or provided a technical breakdown of how the attacker bypassed governance controls.

The protocol’s silence on whether it has paused deposits, withdrawals, or administrative functions has left the community in a state of uncertainty. Governance-based attacks typically allow unauthorized actors to manipulate voting power or administrative permissions to drain assets, yet the specific mechanism behind this breach remains unverified. Term Labs has stated it is currently investigating the incident, though it has offered no roadmap for reimbursement or a date for a postmortem report. Until the team identifies which specific vaults were exposed, the $8.5 million valuation serves only as an external estimate based on current on-chain data.