BlockBeats report: On August 24, the treasury of Term Finance, a DeFi fixed-rate lending protocol, suffered a governance attack. Blockchain security firms PeckShield and CertiK estimated losses of approximately $8.5 million. The attacker allegedly transferred around 2,843 ETH and $1.68 million in USDC, then exchanged the USDC for DAI.
The attack targeted Term Strategy Vaults built on the Yearn V3 architecture, but Yearn stated that the vulnerability stemmed from a custom governance mechanism deployed outside the vaults by Term, and standard Yearn vaults were unaffected. Notably, Term vault governance transactions were originally subject to a seven-day timelock and allowed LPs to vote to veto, but these protective measures failed to prevent the attack.
Prior to the attack, the Term Vault TVL was approximately $12.45 million, with this loss accounting for about 68% of the vault's total TVL. Term Labs is currently investigating the specific attack vector.



