Term Finance loses $8.5M after attacker buys governance votes for just 2 ETH