Term Finance Governance Exploit: Why Audited Code Does Not Protect Your DeFi Deposits

Around $8.5 million flowed out of the deposit pools at the Ethereum lending protocol Term Finance on August 23, 2026. The attacker needed no security flaw in the program code. They bought up enough voting rights to win the vote over those pools single-handedly. They then resolved to pay the funds out to themselves and executed that resolution. For you as an investor, that is the more important part of the news. An audited protocol can be emptied without a single line of code breaking. Anyone holding a balance in a DeFi protocol should therefore know who is allowed to vote on the use of that balance, and how quickly such a resolution takes effect. Term Finance Governance Exploit: What Happened on August 23 Term Finance is a lending protocol on the Ethereum blockchain that arranges loans at fixed interest rates. Users place balances into so-called vaults, from which the protocol issues collateralised loans. It is developed by Term Labs. According to Cryptobriefing, whose report draws on confirmations from the security firms CertiK and PeckShield, roughly 2,843 ETH and around 1.6 million DAI flowed to a single recipient address. Its identifier begins with 0xD5183. At current prices, t...