Morning Edition · Thursday, August 27, 2026Published at 1:48 AM EDT · New York

Security Roundup: Governance Takeover, Hot-Wallet Drain and 40 Malicious Firefox Extensions

Term Labs lost $8.5 million to an attacker who bought voting power, Coinsbuy lost $7.9 million to what investigators call key or admin compromise, and researchers found a browser extension campaign built to harvest recovery phrases.

Term Labs, $8.5 million, governance. On August 23, an attacker accumulated enough voting power to control four USD Coin strategy vaults and roughly 91% of the protocol's Ethereum meta vault, then passed proposals instructing those vaults to…