Term Finance Shuts Meta Vaults After $8.5M Governance Exploit

Term Finance Meta Vaults Are Permanently Closed

Term’s Meta Vaults are a distinct product layer on top of the protocol’s fixed-rate lending system. The protocol’s official code repository describes Term Finance as noncustodial, fixed-rate liquidity software modeled on tri-party repo arrangements, where on-chain auctions match suppliers and borrowers.

The closure therefore does not by itself establish that every Term contract or lending market has failed. Term Labs’ stated distinction between the Meta Vault governance incident and direct borrowing and lending markets is material, but it remains a preliminary company finding until the project releases the affected contracts, transactions and scope review.

The immediate user consequence is more concrete. New deposits into the Meta Vaults are permanently prevented, while the team says withdrawals remain available. A vault closure can preserve an exit path for balances that remain, but it does not answer whether every vault has enough recoverable assets to make each depositor whole.

This is a more consequential follow-up than the initial report because the shutdown changes the product’s operating status. It also differs from The Sandbox’s recent bridge incident, where the central question was unbacked token creation and restricted bridge liquidity. Here, the project has ended the affected vault product after a governance route was used to move assets.

Security Firms Trace an Estimated $8.5M Drain

The public estimates point to a material loss. DefiLlama’s TermFinance Vaults dashboard showed about $10.87 million in total value locked when reviewed, including about $7.23 million on Ethereum. Compared with the roughly $8.5 million security-firm estimate, the reported drain equates to about 78% of that displayed TVL, though the two figures were compiled at different times and may not cover identical balances.

PeckShield said the attacker took roughly 2,843 ETH and 1.68 million USDC, then converted the USDC to DAI. Its tracing said the operation’s initial wallets received 2 ETH from Tornado Cash. That funding route obscures the prior source of those funds, but it does not identify an attacker or establish a link to any person or group.

Term Labs has not publicly confirmed the $8.5 million figure, named victim wallets, disclosed the number of depositors affected, supplied a transaction-by-transaction reconciliation or announced asset freezes. Those omissions are why the article treats the loss as a security-research estimate as of August 24, rather than a final audited loss number.

The governance angle also distinguishes this event from a conventional code-bug exploit. Earlier BonkDAO coverage showed how a vote can become a treasury-risk path when control mechanisms authorize asset movement. The available reporting has not yet established the exact Term control path or why protections did not stop it, so it would be premature to treat any one proposed explanation as confirmed.

Withdrawals and Post-Mortem Now Matter Most

For Meta Vault depositors, the first practical question is whether a withdrawal completes and settles for their specific position. Term’s statement that withdrawals are open is not a substitute for checking the vault, chain and transaction status, particularly while the project assesses scope.

For users of the separate Term borrowing and lending markets, the company’s current position is that those markets were not affected. That assertion still needs to be measured against a formal incident report, a list of affected contracts and independent monitoring. The direct markets’ separation from the Meta Vault layer is relevant, but it does not remove the need for users to verify any contract interaction.

The sector has already seen how partial facts after an exploit can leave depositors trying to distinguish a paused product from a recoverable balance. In our coverage of Summer.fi’s vault exploit, an early loss figure likewise preceded a full root-cause accounting. Term users now need the same basics: affected-vault details, the governance path, remaining balances, recovery options and a timetable for the post-mortem.

Broader crypto sentiment remained upbeat even as the incident developed. Alternative.me’s Crypto Fear and Greed Index read 73, or Greed, on August 24.

Term’s irreversible Meta Vault shutdown is the clearest confirmed change since the initial exploit disclosure. The next evidence that can settle the loss-impact question is a protocol post-mortem with affected contracts and transactions, a vault-by-vault asset reconciliation, and a recovery or reimbursement decision. Until then, the strongest supported account is an estimated $8.5 million governance-related drain followed by a permanent end to new Meta Vault deposits, not a completed accounting of every user loss.