Ethereum Lending App Term Finance Loses $8.5 Million After Attacker Acquires Voting Power

An attacker acquired enough voting tokens to gain control of the Term Finance protocol on Ethereum, resulting in a loss of approximately $8.5 million.

How the Attack Occurred

The attacker purchased voting power at a price lower than the value of the assets managed by the protocol, allowing them to manipulate decisions and extract funds.

Implications for Governance Tokens

This incident highlights the risk that governance tokens with low distribution can be bought cheaply to seize control of a protocol, especially when the assets under management exceed the token’s market value.

Broader Lessons

• Protocols should assess the cost of acquiring voting power relative to the assets they protect.
• More robust distribution and voting safeguards may be needed to prevent similar exploits.