What happened: Following a massive $8.5 million governance exploit on DeFi protocol Term Labs, the hacker has started moving the stolen loot. According to blockchain security firm PeckShield, the attacker deposited 300 ETH (worth around $741,000) into the privacy mixing service Tornado Cash in three separate transactions to try and cover their tracks.
Why it matters: This incident shines a harsh light on ongoing security vulnerabilities in DeFi governance systems, proving that human decision-making processes and voting mechanisms remain prime targets. The use of Tornado Cash also highlights the continuous cat-and-mouse game between hackers using privacy tools and regulators trying to crack down on illicit crypto laundering.