web3: Term Labs suffers a governance attack, losing approximately 8.5 million US dollars
CoinPedia
08-23 21:16
Ai Focus
Term Labs Suffers Governance Attack, Funds from Multiple Treasuries Transferred, with Losses Amounting to Approximately 8.5 Million US Dollars.
Helpful
No.Help

DeFi 协议 Term Labs 遭遇一起治理攻击,多个金库资金被转出,损失约 850 万美元。项目方已确认事件发生,但尚未公布完整追偿方案。此次攻击没有直接利用智能合约代码漏洞,而是通过取得足够投票权控制金库执行转账。

攻击者取得多个金库控制权

链上安全机构 PeckShield 披露,攻击者先积累了足以影响治理的投票权,随后控制了 4 个 USDC 策略金库,以及约 91% 的 Ethereum Meta Vault 投票权。拿到主导权后,相关地址可以自行推动提案并完成批准。

提案通过后,金库按照治理指令将资产转入攻击者控制的钱包。这意味着本次事件更接近治理层失守,而不是常见的合约漏洞被利用。

被转走资产包括 ETH 与 DAI

PeckShield 称,被转出的资产包括约 2,843 枚 ETH,按当时价格计算约为 687 万美元,另有约 160 万美元的 DAI。报道还提到,早些时候约 168 万美元的 USDC 已被兑换为 DAI。

  • 约 2,843 枚 ETH 被转出
  • 约 160 万美元 DAI 被转走
  • 约 168 万美元 USDC 曾被换成 DAI

已知被盗资金随后被归集到一个主要钱包地址。安全机构还表示,攻击者用于相关操作的钱包,初始资金据称仅来自 Tornado Cash 转出的 2 枚 ETH。

项目方仍在调查损失范围

Term Labs 表示,治理漏洞影响了其金库,调查仍在进行中。目前项目方尚未说明可追回金额,也未给出完整的用户资金处理方案。

这起事件也再次暴露出 DeFi 治理层风险。攻击者不需要找到合约中的错误代码,也能通过治理机制完成资金转移,说明审计并不能覆盖全部安全问题。

这是第二次较大资金事故

2025 年 5 月,Term Finance 曾因一次升级中的预言机小数位错误损失约 150 万美元,相关资金后来已被追回。相比上一次,这次损失规模更大,且问题出在治理控制而非预言机配置。

Tip
$0
Like
1
Save
0
Views 212
HQYC reminds readers to view blockchain rationally, stay aware of risks, and beware of virtual token issuance and speculation. All content on this site represents market information or related viewpoints only and does not constitute any form of investment advice. If you find sensitive content, please click“Report”,and we will handle it promptly。
Submit
Comment 0
Hot
Latest
No comments yet. Be the first!
Related
Eurozone industrial production fell 0.1% month-on-month in July: Total volume nearly stagnant, while durable goods show a clear weakening
Eurostat released its first estimate on September 16: In July 2026, quarter-on-quarter industrial production in the eurozone declined by 0.1%, and in the EU by 0.3%. Both regions saw a decrease of 0.1% in June. Compared to a year ago, industrial production in the eurozone remained unchanged, while in the EU it grew by 0.3%. The overall change is minimal, appearing almost like a flat line, but there are clear differences among industries: production of energy, capital goods, and intermediate goods increased quarter-on-quarter, whereas the production of durable consumer goods saw a significant decline. European industry has not experienced a widespread downturn, nor has there been a strong expansion.
币百科
·2026-09-17 10:18:40
28
UK inflation rose to 3.1% in August: Oil prices drive up overall inflation, while core indicators have not accelerated accordingly for now
The Office for National Statistics of the UK announced on September 16 that in August 2026, the Consumer Price Index CPI rose by 3.1% year-on-year, higher than 2.9% in July; the index including the cost of own housing CPIH rose by 3.3% year-on-year, also higher than the previous month's 3.1%. Both indices increased by 0.5% month-on-month, compared to a month-on-month increase of 0.3% in August 2025. The main factor driving annual inflation upwards was transportation, particularly car fuel costs. At the same time, the core CPI remained at 2.6% year-on-year, and the core CPIH also stayed at 2.9%; there was no acceleration in the rise in service prices either. The overall index has rebounded significantly, but the pressure is mainly concentrated on goods and energy.
币百科
·2026-09-17 10:17:28
26
Google Survey: Scientists Save Nearly 7 Hours per Week Due to AI; After Efficiency Increases, Experiments Become a New Bottleneck
On September 15th, Google updated AI and Economy ATLAS, and announced a study in collaboration with Google DeepMind and MIT FutureTech. The study analyzed 2,600 professional AI models and surveyed over 600 scientists from the United States and the United Kingdom. The results showed that nearly half of the surveyed scientists used some form of AI daily, and they reported saving nearly 7 hours per week as a result. However, the study also found that with the rapid generation of more hypotheses, there was a backlog in physical experiments, clinical validation, and result verification. This conclusion is more comprehensive than the claim that "AI speeds up scientific research": while models can streamline some mental processes, they cannot automate...
CoinMeta
·2026-09-17 10:16:17
24
OpenAI Testing "Sponsored Agents": Ads No Longer Just Wait for Clicks, but Require Answers in Conversations
On September 16th, OpenAI announced a new round of product updates for ChatGPT Ads, among which Sponsored Agents has drawn the most attention. After seeing the ads, users can proactively enter an agent dialogue sponsored by merchants and clearly labeled with relevant information. There, they can continue to ask questions about size, features, applicable scenarios, etc., before deciding whether to visit the merchants' websites. OpenAI also introduced an ad management plugin, suggestions for copywriting and images, as well as text adaptation features. Additionally, HubSpot and Shopify were integrated into the system. It is important to note that the sponsored agent feature is currently only being tested with some advertisers in the United States and has not yet been fully rolled out to users worldwide or all merchants.
CoinMeta
·2026-09-17 10:14:59
27
U.S. officials say large oil companies may invest in Venezuela
U.S. officials say large oil companies may invest in Venezuela; Brent crude oil prices rose to $108.75, with markets focusing on global supply prospects.
Coinpaper
·2026-09-16 22:28:27
41
View More