BlockBeats News, December 14th, Aevo officials stated that due to a vulnerability in a smart contract update, the Ribbon DOV legacy vault was attacked on December 12th, resulting in approximately $2.7 million in losses. The Aevo platform was not affected and will continue to operate as usual.
All Ribbon vaults have been halted and will be immediately deactivated, with approximately 32% of the vaults' assets lost due to the attack. Users are instructed to withdraw their funds using the standard withdrawal process, which will require a contract upgrade. The upgrade is expected to be released next week (further details will be provided). The claims window will be open for six months until June 12, 2026. Afterward, the DAO will liquidate all remaining assets and distribute them to users who have previously withdrawn funds. The compensation amount could reach up to 19% of the lost amount or the remaining available balance.
