CertiK flags a $7.6M exploit on Rhea Finance as attackers use fake tokens to mislead oracle systems.