Another DeFi Hack: Term Labs Loses $8.5 Million in Governance Exploit
DeFi lending protocol Term Labs misplaced roughly $8.5 million on Sunday after a governance exploit impacted its Term vaults, blockchain safety agency PeckShield reported.
The attacker pulled 2,843 Ethereum (ETH) and 1.68 million USDC (USDC) out of the protocol. Term Labs confirmed the incident and stated a fuller account would comply with its investigation.
How the Term Labs Attacker Moved the Funds
PeckShield valued the ETH portion at $6.87 million and the stablecoin portion at $1.68 million. The attacker then swapped the USDC into roughly 1.68 million Dai (DAI).
The publish highlighted that the pockets behind the assault was initially seeded with 2 ETH withdrawn from Tornado Cash. Mixer funding is a typical precursor to onchain theft, because it breaks the hyperlink to an alternate deposit.
Term Labs runs fixed-rate lending by means of onchain auctions. According to DefiLlama, the vaults’ whole worth locked stands at $12.2 million, with $8.6 million of that on Ethereum.
The crew has not but named the precise governance perform the attacker abused.
Follow us on X to get the most recent information because it occurs
August Losses Keep Stacking Up
The exploit lands in an already heavy month. DefiLlama had logged 17 safety incidents price about $18.8 million in August earlier than the Term Labs drain. The $8.5 million loss alone would push the month previous $27 million.
August nonetheless trails July, when 38 incidents value roughly $254 million. The Coldcard pockets firmware flaw accounted for $116 million of that whole.
Other August victims embrace Harmony, where an attacker minted roughly 4 billion tokens with out authorization. Payment processor Coinsbuy was also drained of $7.9 million. Sandbox contained a SAND bridge vulnerability on Saturday.
Governance failures keep uncommon however costly. DefiLlama has categorized 5 2026 incidents as governance assaults price $25.1 million mixed, led by a $20 million malicious proposal in opposition to BonkDAO in July.
Term can also be a repeat goal. DefiLlama recorded a $1.65 million hit at Term Finance in April 2025, attributed to an oracle misconfiguration.
Across the broader market, SlowMist counted 182 incidents price about $956 million in the primary half of 2026, per its mid-year report.
Subscribe to our YouTube channel to look at leaders and journalists present professional insights
The publish Another DeFi Hack: Term Labs Loses $8.5 Million in Governance Exploit appeared first on BeInCrypto.
