Overview
- Term Labs confirmed Sunday that a governance exploit affected its strategy vaults and security firms CertiK and PeckShield estimate the attacker drained roughly $8.5 million.
- On-chain analysis shows the exploiter seized near-total voting control of several USDC strategy vaults and about 91% of the Ethereum Meta Vault before voting to withdraw assets to a single wallet.
- Traces show the attacker seeded operations with 2 ETH routed through Tornado Cash and consolidated roughly 2,843 ETH plus about 1.6 million DAI into a wallet beginning with 0xD5183, but on-chain links do not identify the person behind the address.
- Term Labs says it is investigating but has not published a technical postmortem, listed all affected contracts, paused functions, or proposed reimbursement or recovery steps for depositors.
- The incident highlights a governance and tokenomics risk where audited smart contracts can still be abused through vote concentration and weak guardrails, leaving depositor recovery dependent on forensic findings, governance action, exchange cooperation, or legal steps.