# Security Roundup: Governance Takeover, Hot-Wallet Drain and 40 Malicious Firefox Extensions

Term Labs lost $8.5 million to an attacker who bought voting power, Coinsbuy lost $7.9 million to what investigators call key or admin compromise, and researchers found a browser extension campaign built to harvest recovery phrases.

- Published: 2026-08-27T05:48:48.749Z
- Canonical: https://polylog.news/crypto/2026-08-27/security-roundup-governance-takeover-hot-wallet-drain-and-40
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [Rekt News](https://www.rekt.news/), [DeFiHackLabs](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/812736040d22e31cf399d84e7bee2e9bcaca72d3), [Polylog editors](https://polylog.news), [Bitcoin Magazine](https://bitcoinmagazine.com/news/kraken-says-users-were-dust-attacked)

Term Labs, $8.5 million, governance. On August 23, an attacker accumulated enough voting power to control four USD Coin strategy vaults and roughly 91% of the protocol's Ethereum meta vault, then passed proposals instructing those vaults to…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-08-27/security-roundup-governance-takeover-hot-wallet-drain-and-40 (subscription information: https://polylog.news/pricing).