Term Labs Vaults Drained for About $8.5 Million in Governance Exploit

Term Labs said its vaults were hit by a governance exploit that security firms estimated drained about $8.5 million, according to reporting that cited the protocol’s public acknowledgement and on-chain tracing from PeckShield.

PeckShield said the attacker took roughly 2,843 ETH, worth about $6.87 million at the time of the report, and 1.68 million USDC, which was later swapped into about 1.68 million DAI. PeckShield also said the exploit was linked to governance controls on Term vaults and that the attacker’s funds were initially sourced from 2 ETH sent through Tornado Cash.

The episode highlights a familiar DeFi risk: pooled assets can be exposed through governance paths even when the underlying blockchain itself is not the issue. In this case, the reported drain appears to have flowed through vault control mechanics rather than a broader failure of Ethereum.

What the reported exploit involved

According to the PeckShield post, the attacker bypassed timelock protections tied to the vault governance process and moved assets out of the affected contracts. The security firm’s figures broadly match the widely cited $8.5 million estimate attached to the incident.

Term Labs has not, in the material cited here, publicly detailed the full sequence of events, identified every affected vault or outlined any recovery steps. That means the current picture is centered on the reported outflows and the governance mechanism used, not on a completed postmortem.

The incident adds to the list of recent DeFi security events in which governance permissions, contract administration or related controls become the path to loss. For users, the practical takeaway is narrower and more immediate: vault access structures matter, especially when they can move funds without the same friction expected from normal timelocked actions.