Term Finance Shuts Meta Vaults After $8.5M Exploit

The Exploit and Governance Breakdown

Term Finance permanently disabled deposits to its Meta Vaults and stripped the vaults of DAO governance voting rights after an attacker drained an estimated $8.5 million in ETH and stablecoins, according to security firm PeckShield. The protocol announced the action on Aug. 23 but did not specify how much capital remained in the vaults after the loss or provide a timeline for addressing any shortfall between remaining assets and user deposits. CryptoSlate reporting confirms the exploit was preceded by a governance process, indicating the attacker gained control over vault authorization mechanisms rather than exploiting a direct smart contract vulnerability.

Governance Process and Vault Isolation

The involvement of a governance process in the drain raises questions about how an attacker obtained voting rights or authorization to trigger withdrawals from user funds. Term Finance has not disclosed the exact mechanism—whether the attacker compromised private keys, executed a flash loan attack to manipulate voting, or exploited a logic flaw in the vault's permission system. The decision to revoke Meta Vaults' governance powers suggests the protocol team moved to prevent any further actions by the compromised authorization layer.

Withdrawal Access and Recovery Uncertainty

Term Finance left withdrawal functionality operational, allowing users to recover their remaining funds. However, the protocol has not confirmed the loss or promised to cover any shortfall, leaving affected depositors without clarity on recovery timing or whether they will recover their full principal.