Crypto news

On August 23, the Term Labs protocol team confirmed unauthorized access to the storage management system of the Term Finance DeFi platform. However, the scale of the damage initially remained behind the scenes, sparking a wave of speculation in the community. My analysis of the incident, based on blockchain snapshot data, shows that the attack turned out to be more serious than it seemed at first glance.

According to my assessment, the attacker withdrew 2,843 ETH — approximately $6.9 million at the current exchange rate — as well as 1.68 million USDC, which were promptly converted into DAI to obscure the trail. During further review conducted by independent auditors, total losses were estimated at $8.5 million. This is an alarming signal: according to DefiLlama data, the stolen funds account for about 68% of all assets locked in the protocol's vaults. This level of concentration makes the incident not just a technical error, but a systemic blow to Term Finance's liquidity.

The mechanics of the hack, judging by available transactions, targeted a vulnerability in the pool management logic, allowing the attacker to bypass standard data integrity checks. This is not classic phishing or a smart contract exploit — rather, it is an error in the administration process that granted access to private vault functions. For users, this is a lesson: even audited, well-established protocols can have blind spots in operational procedures.

At this point, Term Labs has not proposed a public compensation plan, leaving asset holders in uncertainty. I recommend that investors using such services reassess their risks and pay attention to diversifying capital across multiple protocols with different security architectures.

My professional opinion: this case highlights a growing trend of attacks on the "governed" components of DeFi, not just on code. Until teams implement multi-layered access control mechanisms, such losses will recur, and the market should factor this into the price of risk.