DeFi Platform Term Finance Loses $8.5M After Attacker Buys Governance Votes for Pocket Change

Term Finance, a decentralised finance (DeFi) platform, has lost $8.5 million after an attacker exploited weaknesses in its governance system. According to reports, the attacker was able to acquire enough voting power to influence platform decisions for the cost of just 2 ETH, a relatively small sum compared to the scale of the resulting loss.

The incident underscores a recurring risk in DeFi projects: governance systems that allow anyone to buy influence cheaply can be manipulated by attackers to authorise malicious changes or drain funds. Once sufficient voting power is obtained, an attacker may be able to push through proposals that redirect funds or alter security settings, often before the community can react.

While this attack targeted a cryptocurrency platform rather than a traditional business, it's a reminder that any system relying on voting, approvals, or multi-party sign-off needs strong controls to prevent a small number of compromised accounts or cheaply acquired permissions from causing outsized damage.