Crypto Scams Watch: Term Labs Hit by $8.5M Governance Exploit

Key Insights:

• Coverage of crypto scams widened after an $8.5 million Term Labs exploit.
• Attackers drained Ethereum and USDC from affected Term vaults.
• Term Labs confirmed the incident and opened an investigation.

Term Labs, in its recent X post, confirmed a governance exploit affecting its vaults on Aug. 23, 2026. The incident drew broader coverage of crypto scams after security firms tracked roughly $8.5 million in outflows. The attack involved Ethereum assets, and USDC held through Term-linked vault infrastructure.

The incident mattered because governance permissions can expose pooled assets without compromising Ethereum itself.

Term Finance had already warned users that vault smart contracts could contain vulnerabilities that could cause fund losses. Its legal disclosures said Term Vaults rely on Yearn v3 contracts and external decentralized finance protocols.

Crypto Scams Focus Shifts to Term Labs Governance Exploit

PeckShield stated that the attacker drained about 2,843 ETH, valued at around $6.87 million, during its assessment. The blockchain security firm also tracked 1.68 million USDC leaving affected vaults. It said the USDC was later exchanged for roughly 1.6 million DAI.

PeckShield also traced the attacker’s initial funding to two ETH from Tornado Cash. That funding route did not establish the attacker’s identity or prove broader laundering activity. It only showed the reported source of funds used before the exploit.