💀 DeFi just got another reminder: governance can be an attack vector.
Term Finance lost about $8.5M after an attacker exploited a vulnerability in the protocol’s governance system.
According to PeckShield, the hacker withdrew approximately:
⚡ 2,843 ETH (~$6.9M)
⚡ 1.68M USDC, then swapped it to about 1.68M DAI
CertiK estimates the total losses at around $8.5M.
Term Labs confirmed it is investigating a “governance exploit” affecting Term’s vaults.
What’s scary is the scale of the damage.
The vaults’ TVL is about $12.45M, meaning the stolen amount is equivalent to roughly 68% of the TVL.
I think DeFi is sometimes truly literal:
“Don’t trust, verify.”
Then once you verify, you find governance also wants to rug you. 💀
Term previously lost about $1.6M in April 2025 due to a misconfigured oracle.
One exploit is bad.
A second exploit starts looking like a subscription plan. 😭
Do you think DeFi should prioritize governance security over the speed of feature development?
#defi #Ethereum #TermFinance $ETH