A governance exploit tore through Term Labs’ vault infrastructure on August 23, 2026, draining roughly $8.5 million in Ethereum and stablecoins from the DeFi lending protocol. The Term Labs governance exploit didn’t involve a broken smart contract or a coding flaw — it involved an attacker who quietly bought enough voting power to simply tell the vaults to hand over their funds, and they complied.
Key takeaways
Term Labs confirmed on August 23, 2026 that a governance exploit drained about $8.5 million from its vaults.
Attackers extracted roughly 2,843 ETH (about $6.87 million) and 1.68 million USDC, later swapped for approximately 1.6 million DAI.
The attacker’s initial funding traced to just 2 ETH sourced through Tornado Cash, according to PeckShield.
The exploit hit Term Vaults built on Yearn v3 infrastructure, not Term Finance’s core repo lending architecture.
PeckShield and CertiK both tracked the stolen funds to a wallet beginning with 0xD5183, and Term Lab
We współpracy z: https://en.cryptonomist.ch/2026/08/23/term-labs-governance-exploit/
