An attacker bought votes, then seized vault keys.

No code broke — a protocol’s treasury is as safe as its token’s float.

Term Finance lost an estimated $8.5 million after the attacker’s votes passed proposals granting vault control, Defimon said.

Term has permanently shut the product and revoked the governance permissions that enabled it.

Sources: CoinDesk