Engine

Million

Yearn

Ethereum

<h3 id="summary">Summary</h3>
<ul>
 <li>Term Finance lost approximately $8.5 million as attackers exploited custom governance controls and withdrew Ether, USDC, and DAI from vaults.</li>
 <li>Yearn confirmed standard vaults remained secure, while Term has not explained how its timelock and depositor veto protections ultimately failed.</li>
 <li>The exploit erased nearly 68 percent of vault liquidity, creating added pressure following Term Finance’s separate $1.6 million oracle loss.</li>
</ul>
&nbsp; 
Ethereum-based lending protocol Term Finance lost approximately $8.5 million through an exploit targeting its custom vault governance system. <a href="https://x.com/term_labs/status/2091667425129304215" rel="noopener noreferrer nofollow">According to Term Labs on X</a>, the governance exploit affected Term vaults and prompted an internal investigation. However, the team neither confirmed the losses nor identified which Strategy Vaults experienced unauthorized withdrawals. 
PeckShield estimated that the attacker withdrew 2,843 ETH, worth roughly $6.9 million, alongside 1.68 million USDC. According to PeckShield on X, the attacker exchanged the withdrawn USDC for approximately 1.68 million DAI. 
Meanwhile, CertiK estimated the overall loss at nearly $8.5 million following its separate assessment of blockchain transactions. PeckShield traced the assets to an e vlojiz address that initially received two ETH via Tornado Cash. 
Also Read: <a href="https://36crypto.com/cysic-cys-price-prediction-2026-2030-can-cys-hit-3/" rel="noopener noreferrer nofollow">Cysic (CYS) Price Prediction 2026–2030: Can CYS Hit $3?</a> 
<h2 id="custom-governance-system-becomes-the-main-attack-route">Custom Governance System Becomes the Main Attack Route</h2>
Term’s Strategy Vaults follow the ERC-4626 standard and operate through infrastructure developed using <a href="https://36crypto.com/yearn-finance-recovers-2-4-million-after-latest-exploit-estimated-losses-near-9-million/" rel="noopener noreferrer nofollow">Yearn V3 architecture</a>. However, the attacker targeted a customized governance wrapper surrounding Term’s vaults rather than exploiting Yearn’s standard infrastructure. 
<a href="https://x.com/yearnfi/status/2091599858323075144?s=20" rel="noopener noreferrer nofollow">According to Yearn</a>, this attack method cannot affect vaults operating under its standard arrangements. Term separates operational authority from depositor oversight through several roles carrying responsibilities. A manager handles auctions, while a governor controls risk parameters, emergency functions, and <a href="https://36crypto.com/yei-finance-yei-price-prediction-2026-2030-can-yei-hit-0-50-soon/" rel="noopener noreferrer nofollow">broader protocol settings</a>. 
Additionally, liquidity providers participate as <a href="https://36crypto.com/what-is-a-decentralized-autonomous-organization-dao-and-how-does-it-work/" rel="noopener noreferrer nofollow">DAO members</a> and may veto governance transactions during a seven-day timelock. Nevertheless, Term has not explained which role the attacker compromised or why those protections failed. 
Before the exploit, Term’s vault product held approximately $12.45 million across supported networks, based on DefiLlama data. Around $8.8 million of that total operated through vaults deployed on the Ethereum blockchain. Consequently, the reported loss represented nearly 68 percent of the vault product’s total value locked across all networks. 
<h2 id="previous-loss-adds-pressure-on-term-finance">Previous Loss Adds Pressure on Term Finance</h2>
Term experienced a separate $1.6 million loss during April 2025 when an incorrectly configured oracle triggered faulty liquidations. The protocol recovered more than $1 million and pledged treasury resources to cover the remaining amount. 
Governance attacks remain a persistent <a href="https://36crypto.com/what-is-decentralized-finance-defi-and-how-does-it-work/" rel="noopener noreferrer nofollow">decentralized finance</a> risk because attackers can manipulate voting mechanisms or obtain privileged administrative controls. Term’s investigation must establish how the attacker obtained governance access and bypassed protections designed for depositors. 
Also Read: <a href="https://36crypto.com/michael-saylor-reveals-bitcoins-true-purpose-as-strategy-builds-credit-engine/" rel="noopener noreferrer nofollow">Michael Saylor Reveals Bitcoin’s True Purpose as Strategy Builds Credit Engine</a> 
The post <a rel="noopener noreferrer nofollow" href="https://36crypto.com/term-finance-governance-exploit-drains-8-5-million-from-ethereum-vaults/">Term Finance Governance Exploit Drains $8.5 Million From Ethereum Vaults</a> appeared first on <a rel="noopener noreferrer nofollow" href="https://36crypto.com">36Crypto</a>.

Term Finance Governance Exploit Drains $8.5 Million From Ethereum Vaults

Table of Contents

36crypto

Other articles published on Aug 24, 2026

Join our free newsletter for daily crypto updates!