Term Finance, an Ethereum fixed-rate lending protocol, was reportedly drained of about $8.5 million after an attacker gained control over governance voting for several strategy vaults. The incident is notable because the public reports describe a governance takeover, not a direct exploit of Ethereum or a simple smart-contract bug.

Security-firm reporting cited by multiple outlets says the attacker accumulated enough voting power to pass malicious proposals against affected Term vaults. Crypto Briefing reported that the attacker gained full voting control over four of five USDC strategy vaults and about 91% of the Ethereum Meta Vault, then directed funds to a single wallet beginning with 0xD5183.

The estimated loss is being treated conservatively because Term Labs has not published a full technical postmortem in reachable public materials. Reported figures from CertiK and PeckShield point to roughly 2,843 ETH and about 1.6 million DAI ending up at the identified address. Other reports described USDC movements that were later swapped into DAI.

For DeFi operators, the incident is a reminder that governance permissions can be as sensitive as contract code. Low participation, thinly distributed voting power, or weak safeguards around vault roles can turn ordinary proposal machinery into a path for asset transfers. Until Term Labs provides a detailed incident report, the best-supported version is narrower: strategy vault governance was abused, the loss was estimated near $8.5 million, and investigators are tracking one main recipient address.