Term Finance drained of $8.5M in governance attack
August 23, 2026
An attacker turned 2 ETH from Tornado Cash into a voting supermajority, then voted Term Finance’s vaults empty.
An attacker turned 2 ETH from Tornado Cash into a voting supermajority, then voted Term Finance’s vaults empty.
A chain of six bugs let an attacker drain Maya Protocol’s vaults and crash CACAO before validators forced a network-wide halt.
An attacker used a $65.4 million flash loan to drain roughly $6 million in DAI from the Lazy Summer Protocol.
Forged proofs drained the bridge after a signing key leaked on GitHub, and the TAIKO token fell 10%.
Forged proofs traced to a leaked SGX signing key drained the bridge before the team froze the network
Founder Stani Kulechov called the $8.45 billion deposit run proof of resilience, but Aave survived only after a $300 million rescue.
A supply-chain campaign disguised malware as crypto and AI dev tools to steal wallet keys and credentials
A supply-chain campaign disguised malware as crypto and AI dev tools to steal wallet keys and credentials
Eighth major bridge attack of 2026 pushes cross-chain losses past $328 million