Attack on Term Finance: up to $8.5 million withdrawn from the DeFi protocol's vaults
On August 23, the Term Labs team officially confirmed a breach of the storage management system of the DeFi protocol Term Finance. However, the exact scale of the damage was not initially disclosed, sparking a wave of speculation in the crypto community. My own data and analysis by independent experts allow me to reconstruct the full picture of the incident.
Exploit details: figures and assets
According to my assessment, the attacker gained control over key vault functions and withdrew a significant portion of liquidity. In total, 2,843 ETH were stolen, equivalent to approximately $6.9 million at the time of the transaction, as well as 1.68 million USDC. Notably, the stablecoins were immediately converted into DAI, indicating an attempt to obscure the trail and hinder tracking of funds through mixers or bridges.
Independent auditors from CertiK, having conducted their own analysis of on-chain data, estimate the total damage at $8.5 million. This figure is particularly alarming because, according to DefiLlama data, it constitutes 68% of all assets locked in the protocol at the time of the attack. Such a level of losses calls into question the resilience of Term Finance and the effectiveness of its security mechanisms.
Vulnerability analysis and consequences
Although the Term Labs team has not disclosed the technical details of the exploit, the nature of the attack points to a vulnerability in the vault management logic, rather than a simple theft of keys. Such incidents highlight a systemic problem in the DeFi sector: even audited protocols often remain vulnerable to complex attack scenarios involving the compromise of administrative privileges.
For asset holders in Term Finance, this is a serious blow to trust. Recovery of funds in such cases is unlikely unless an out-of-court agreement is reached with the hacker, which is rare in current market realities. The incident also serves as a reminder of the need to diversify risks and use insurance funds when working with DeFi platforms.
My expert opinion: The attack on Term Finance is another wake-up call for the entire industry. Protocols managing significant liquidity pools must implement multi-layered security systems, including multi-signatures, time delays on withdrawals, and automatic stop-losses. Without this, DeFi will continue to remain a field for experimentation, where the cost of a mistake is measured in millions of dollars.