A governance exploit drained $8.5 million from Term Labs vaults, adding to a growing list of costly DeFi security incidents in 2026.