The $8.5M Term Labs DAO Heist that Cost $951 to Pull Off

The $8.5M Term Labs DAO heist that cost $951 to pull off

An attacker bought a controlling stake in a DAO governance token for less than $1,000, passed malicious proposals, and drained $8.5 million from strategy vaults. The exploit exposes a vulnerability that most DeFi protocols have not patched. The math is…

Term Finance 遭治理攻击后永久关闭 Meta Vaults，损失约 850 万美元

ChainCatcher 消息，固定利率借贷协议 Term Finance 的开发团队 Term Labs 宣布，在治理攻击事件后，所有 Term Meta Vaults 已永久关闭，DAO 治理权限被撤销，但提款通道仍保持开放。在 8 月 23 日的更新中，Term 表示此次关闭不可逆转，并永久阻止后续存款，但未披露金库中剩余资产规模，仅表示将“探索路径”以解决任何缺口，存款者可收回的金额仍悬而未决。区块链安全公司 PeckShield 估计，攻击者盗走约 2,843 枚 ETH（当时价值约 687 万美元）及 168 万枚 USDC（后被兑换为约 168 万枚 DAI），总损失约 850 万美元。链上记录印证了相关转账：一笔交易将 2,841.74 WETH 转至被 Etherscan 标记为“Term Finance...

Term Finance Permanently Shuts Meta Vaults After Exploit PeckShield Estimated at $8.5 Million

Term Labs said all Term Meta Vaults have been shut down and DAO governance roles revoked after a governance exploit hit the vault product, while withdrawals remain open. In an Aug. 23 update, Term said the shutdown is irreversible and permanently prevents further deposits. The update did not... Read the full story at The Defiant

Term Finance kills Meta Vaults after governance process clears path for $8.5 million drain

On-chain fixed-rate lending protocol Term Finance said it permanently shut down its Meta Vaults after a governance exploit, ending new deposits while leaving withdrawals open. Term Labs said it also revoked the vaults' DAO governance roles. Blockchain security firm PeckShield separately estimated that the attacker removed about 2,843 ETH worth $6.87 million and 1.68 million USDC, which was swapped for roughly 1.68 million DAI. Term has not confi…