Ethereum lending platform Term Finance lost an estimated $8.5 million after an attacker used cheaply acquired governance votes to take control of its vaults.