Term Finance Loses $8.5 Million in Governance Attack

On August 23, at 06:25 UTC, an attacker exploited vulnerabilities in Term Finance's governance system, executing malicious proposals that were approved without veto. The attack resulted in the theft of roughly 2,843 ETH and 1.68 million USDC, totaling about $8.5 million. This amount represents approximately 68% of the assets held within Meta Vaults. In response, Term Finance has closed the Meta Vaults and revoked associated governance rights, highlighting the risks associated with governance security in DeFi protocols. The incident underscores the importance of robust security measures in decentralized management systems to prevent similar exploits in the future.