An attacker drained $8.5 million from Term Finance’s lending vaults on August 23 by taking over the DeFi protocol’s own governance vote, not by exploiting a flaw in its code. The attacker seized majority control of Term’s governance vote, then withdrew 2,843 ETH and 1.68 million ...