Term Finance lost $8.5M after an attacker spent just 2 ETH from Tornado Cash to buy governance votes and drain multiple Ethereum strategy vaults.

Term Labs lost $8.5M after an attacker seized voting control of strategy vaults on Term Finance, draining 2,843 ETH and 1.6M DAI in a governance

Term vault proposals face a seven-day delay and can be vetoed by liquidity providers, yet those controls apparently did not stop the exploit.