Keyboard shortcuts

BTC79,401-1.79%ETH2,255.64-2.26%SOL90.77-4.26%BNB670.69-1.48%XRP1.43-1.78%ADA0.2640-3.54%DOGE0.1131-0.48%AVAX9.68-4.00%LINK10.20-4.44%DOT1.32-5.88%BTC79,401-1.79%ETH2,255.64-2.26%SOL90.77-4.26%BNB670.69-1.48%XRP1.43-1.78%ADA0.2640-3.54%DOGE0.1131-0.48%AVAX9.68-4.00%LINK10.20-4.44%DOT1.32-5.88%
ICO // Rug

Terminus Drains $38M a Week After Oversubscribed Launch

The team's wallet moved the entire treasury through a mixer on Sunday evening. On-chain sleuths flagged the activity within minutes; the team's Telegram went dark an hour later.

BEARISH TONE· MED
Nadia Levin
Contributing Writer
Mar 28, 2026, 12:00 PM UTCMar 28
5m read
Terminus Drains $38M a Week After Oversubscribed Launch

Terminus, a Solana-based DeFi protocol that closed a $38 million oversubscribed token sale eight days ago, drained its treasury wallet through a cross-chain mixer on Sunday evening and has since gone dark across all of its public channels. The incident is being called by several on-chain analytics firms the largest completed rug pull of the calendar year.

The sequence

On-chain tracing by Arkham and ZachXBT, working independently, reconstructed the following timeline:

  • 22:14 UTC: Treasury multisig initiates outgoing transfer
  • 22:17 UTC: Funds routed through a cross-chain bridge to a mixer on Ethereum
  • 22:19 UTC: First on-chain alerts flagged by community monitoring bots
  • 22:47 UTC: Terminus's Telegram deleted
  • 23:12 UTC: Terminus's X account private, then deleted
  • 23:35 UTC: Website begins returning a blank page

The mixer involved — which we are not naming to avoid amplifying it — has processed approximately $140 million in this incident's cohort of outflows, according to Arkham's preliminary figures. Approximately $12 million of the stolen funds has been frozen by a stablecoin issuer whose contract permits blacklisting.

"The mechanics of this one were not sophisticated. The team had a multisig, the multisig had them as all three signers, and they signed." — ZachXBT, in a post Sunday evening

The warning signs

Retrospectively, several signals stood out. The Terminus team was partially pseudonymous. Its audit — by a firm that has since issued a statement saying it audited only the token contract and not the treasury controls — was published 48 hours before launch. The project's Discord had grown from zero to 140,000 members in approximately six weeks, a pace that multiple community members flagged at the time.

The industry response

Calls for additional diligence requirements on launchpads are coming from participants who had, in previous cycles, resisted similar proposals. The practical response is likely to include more stringent team identity verification and multisig architecture standards at the major launchpads. Whether that response is priced into the next sale is a separate question.

Terminus's token, TMS, now trades at approximately 2% of its launch price on the illiquid secondary markets that still list it. Holders of the token are unlikely to recover their capital in any direct sense. The market's memory for this kind of incident has historically been short; what the Terminus rug changes, if anything, is likely to be procedural rather than cultural.

Written by
Nadia Levin
Contributing Writer · @nlevin

Related stories