Term Finance Shuts Down All Vaults Following Exploit, Withdrawals Remain Open

Ethereum-based fixed-rate lending protocol Term Finance has announced the shutdown of all Term Meta Vaults and the revocation of DAO governance authority following a recent security breach. The move comes as the project continues to investigate the incident and work on recovery efforts.

What Happened at Term Finance

In a post on X (formerly Twitter), Term Finance confirmed that all Term Meta Vaults have been permanently closed. New deposits are no longer accepted, and the vaults cannot be restarted. However, the team stated that withdrawals remain available for users who need to access their funds.

According to the project’s preliminary investigation, the exploit was limited to the vault governance mechanism and did not compromise the underlying protocol or the lending market itself. The team emphasized that core protocol functions remain unaffected.

Recovery Efforts and Next Steps

Term Finance is collaborating with external security firms to trace and recover the stolen assets. The team has not ruled out additional response measures if full recovery is not achieved. The exploit resulted in the loss of approximately $8.5 million in assets from the vaults.

This incident adds to a growing list of DeFi exploits that have targeted governance and vault systems. Security experts point to the complexity of smart contract interactions and the need for more robust auditing and monitoring processes.

Impact on Users and the DeFi Ecosystem

For users, the immediate priority is ensuring they can withdraw remaining funds. Term Finance has provided instructions for withdrawal, but the process may take time given the ongoing investigation. The broader DeFi ecosystem is watching closely, as this incident highlights the persistent risks associated with permissionless financial protocols.

While the total loss is relatively small compared to some major hacks, it underscores the importance of security diligence. Investors are reminded to exercise caution and conduct thorough research before interacting with new or complex DeFi platforms.

Conclusion

Term Finance’s decision to shut down all vaults and revoke governance authority is a significant step in containing the damage from the exploit. Withdrawals remain open, and recovery efforts are underway. The incident serves as a reminder of the evolving security challenges in the decentralized finance space.

FAQs

Q1: Can I still withdraw my funds from Term Finance vaults?
Yes, withdrawals remain available. The team has stated that users can access their funds, though the process may be slower than usual due to the ongoing investigation.

Q2: Will Term Finance restart the vaults?
No. The project has confirmed that the vaults are permanently closed and cannot be restarted. New deposits are permanently halted.

Q3: Was the core lending protocol affected by the hack?
According to Term Finance, the exploit was limited to the vault governance mechanism. The core protocol and lending market remain unaffected, based on the investigation so far.