DeFi lending protocol Term Labs suffered an $8.5 million loss after an attacker used a low-cost governance token acquisition to pass malicious vault transfer proposals. The exploit drained approximately 2,843 ETH and 1.68 million USDC from the protocol's strategy vaults. Security firms PeckShield and CertiK verified the incident, noting the initial funding was traced back to Tornado Cash.