How much was stolen in the TermFinance Vaults hack?

DeFiLlama reports $8.5M stolen from TermFinance Vaults on ethereum.

Who was hit in the TermFinance Vaults hack?

TermFinance Vaults, on ethereum, on August 23, 2026. Attack type: contract exploit.

Where did the TermFinance Vaults funds go?

ChainHint traced $41.9M to 162 endpoints, including Pendle, circle cctp, Coinbase (as labelled; not all labels are verified).

Recent hacks/TermFinance Vaults

TermFinance Vaults Hack:$8.5M Stolen

August 23, 2026 · Ethereum

Reported by DeFiLlama

As of 2026-10-11 14:31 UTC. These are the feed's figures, not ChainHint's. A freshly reported incident is an unverified third-party claim and the numbers move.

Estimated Loss$8.5M

ChainEthereum

DateAugust 23, 2026

Attack typeContract exploit

Attacker address

Verified by ChainHint · 2026-09-18

0xa908b3472d76e7744bab0a5911768a4a6300612b

On-chain check: etherscan tokentx: 2026-08-23 06:25:47 UTC, 2,841.7435 WETH from the attacker's exit-strategy contract 0x184f2e57…6338 to 0xa908…612b in tx 0xd354a15b…4129; 06:40 that wallet forwards 2,841.24 to the consolidation address 0xd5183d8b…fc13, which also receives 1,679,642 DAI from the USDC-side wallet 0x686457a7…0691

Exploit transaction: 0xd354a15b…d3014129

Sources: defiprime.com · dev.to

Governance exploit (queued parameter change executed unopposed). Address = first recipient of the vault's WETH; consolidation 0xd5183d8bfc65a50863c62af2538198a8288ffc13.

Traced by ChainHint — Traced Outflow

$41.9Mreached 162 endpoints

220 nodes · 1329 edges

Largest destinations: Pendle, circle cctp, Coinbase, Velora, Tornado Cash — as labelled in our database; not all of these labels are verified.

In ChainHint's incident archive

No earlier incident at TermFinance Vaults is recorded in our archive.

Contract exploit — 16 incidents of this kind in the 90 days before this page was built, $247M in total, among the incidents ChainHint lists.

TermFinance Vaults hack: the facts

How much was stolen in the TermFinance Vaults hack?: DeFiLlama reports $8.5M stolen from TermFinance Vaults on ethereum.
Who was hit in the TermFinance Vaults hack?: TermFinance Vaults, on ethereum, on August 23, 2026. Attack type: contract exploit.
Where did the TermFinance Vaults funds go?: ChainHint traced $41.9M to 162 endpoints, including Pendle, circle cctp, Coinbase (as labelled; not all labels are verified).

Related hacks

All hacks →

Investigate your own incident

Trace the path of funds across 12 chains on public blockchain data.