Term Finance, an Ethereum-based lending protocol, lost approximately $8.5 million in a governance-layer exploit, according to a report from crypto news outlet Yellow.com.

The incident is the latest in a string of governance attacks that have drained hundreds of millions from DeFi treasuries since 2022, and it lands at a moment when on-chain lenders are still rebuilding trust after a turbulent first quarter.

What happened at Term Finance?

Yellow.com's report did not name an attacker, identify the compromised function or timestamp the exploit. As of writing, Term Finance had not posted a public incident statement on its official X account, blog or governance forum. The protocol's Ethereum mainnet contracts remain live, according to its public interface, though readers should treat that status as provisional pending confirmation.

Governance attacks generally follow a recognizable pattern. An actor accumulates enough voting weight — through flash loans, direct token purchases, or compromised admin keys — to push a malicious proposal past quorum. That proposal can then drain a treasury, mint unbacked tokens, or rewrite parameters that govern borrowing, collateral or liquidation. The Term Finance incident fits that template, though the specific proposal, the attacking address and the laundering trail have not yet been published.

How does this compare to other 2025 incidents?

The $8.5 million figure puts the Term Finance exploit in the lower-middle band of the year's DeFi losses:

• The February Bybit cold-wallet breach cost the exchange roughly $1.5 billion in ether and staked ETH, making it the largest single-event crypto theft on record.
• The Cetus Protocol hack on Sui in May drained more than $150 million from concentrated-liquidity pools before validators froze the attacker's address.
• The KiloEx perpetual-futures exploit in April took the protocol for roughly $7.5 million through a price-oracle manipulation.

Term Finance's loss is comparable in magnitude to KiloEx, but the attack vector — governance rather than oracle — points to a different operational weakness. Oracle exploits leave a price trace; governance exploits leave a vote.

What does a governance attack actually cost?

The headline number rarely captures the full damage. Affected projects typically see:

• A token sell-off as holders race to exit.
• A pause on withdrawals that locks out legitimate users.
• A negotiated white-hat settlement or a treasury bailout funded by the team's own reserves.
• Months of post-mortem work, audit renewals and contract redeployments.

For smaller protocols, that second-order cost can exceed the stolen principal. Term Finance has not disclosed whether user deposits are impaired or whether the loss was confined to treasury assets.

What to watch next

On-chain analysts will be looking at Term Finance's governance contract on Etherscan over the next 24 to 48 hours for any anomalous proposals, treasury transfers or ownership renouncements executed in the hours before the report. Any post-mortem from the team — including a timeline, a perpetrator address and a recovery plan — will determine whether the $8.5 million figure holds or grows. Yellow.com did not respond to a request for the underlying source material at press time, and this story will be updated once on-chain confirmation lands.