Term Finance has permanently shut down its Meta Vaults and stripped the products of DAO governance powers after an attacker drained an estimated $8.5 million in ETH and stablecoins, the protocol said in an Aug. 23 update. What happened - Term Labs says all Meta Vaults were irrevocably closed and DAO governance roles tied to those vaults have been revoked. The shutdown is irreversible: new deposits are blocked, but withdrawals remain available for existing depositors. - The team has not published a vault-by-vault accounting, disclosed how much remains in the vaults, or stated how much each depositor can withdraw. Term Labs said it will “explore pathways” to cover any shortfall, but offered no compensation plan, reimbursement schedule, or timeline for a full technical report. Estimated losses and chain evidence - Blockchain security firm PeckShield traced roughly 2,843 ETH and 1.68 million USDC out of the affected vaults and estimated an aggregate loss of about $8.5 million (approximately $6.87M in ETH + $1.68M in USDC). PeckShield reported the USDC was swapped for about the same amount of DAI after removal from the protocol. - On-chain traces show the attacker’s addresses labeled by Etherscan as “Term Finance Exploiter 1” and “Exploit­er 2.” PeckShield also reported that the attacker’s initial funding included a 2 ETH deposit routed through Tornado Cash; that trace does not identify the person controlling the attacker wallet. How the attacker pulled it off - According to available analysis, the attacker acquired a small amount of governance tokens (reported by one analysis as about $951 worth) to buy enough voting power to submit and pass governance actions that moved funds out of several vaults. The exploit targeted Term’s governance wrapper rather than an obvious smart-contract bug. - One post-incident analysis suggested Term’s Meta Vault product held roughly $12.45 million before the attack, and the attacker’s actions extracted nearly 68% of that value. Term Labs has not independently confirmed the precise purchase amount, voting percentages, or the share of assets lost; a full accounting awaits its ongoing investigation. Relationship to Yearn and containment - Yearn confirmed Term’s affected contracts were built on Yearn V3 architecture but said the exploit was carried out through a custom governance wrapper Term added around its vaults. Yearn emphasized that standard Yearn vault configurations were not vulnerable to the same governance route. - Term Labs also said the incident did not affect its underlying protocol or fixed-rate lending markets; Meta Vaults were a separate product layer that deployed assets into managed strategies. Response, recovery and next steps - Term Labs said external security specialists are assisting with remediation and asset recovery but has not named the firms or described specific recovery actions. The protocol has not announced contact with the attacker, law enforcement, centralized exchanges, or stablecoin issuers to try to freeze or recover stolen funds. - No U.S. regulator has publicly opened an investigation into this incident. PeckShield’s reporting of Tornado Cash in the attacker’s funding chain does not prove the stolen assets entered the U.S. or transited U.S.-controlled services. Broader context - Governance-as-attack-vector incidents have recurred in 2026: in July an attacker bought voting power to drain roughly $20M in BONK from BonkDAO’s treasury. Those events have prompted governance security changes in other communities (for example, ENS DAO’s security council mechanism) and renewed attention to token-weighted governance risks. - Industry watchers should expect further on-chain tracing, potential exchange freezes if stolen funds are moved on-ramp, and a forthcoming technical postmortem from Term Labs—if and when the team publishes one. What to watch - Term Labs’ detailed post-incident report and vault-level reconciliation. - Any disclosures about reimbursement plans or recovery deals. - Law enforcement or exchange actions to freeze attacker-controlled funds. - Further forensic updates from PeckShield or other blockchain security firms. Bottom line: Term Finance has taken the drastic step of permanently shuttering its Meta Vault product after a governance-based exploitation that appears to have siphoned roughly $8.5M. The attack underscores the risks of governance-wrapped products and the need for robust safeguards around token-weighted voting power. Read more AI-generated news on: undefined/news