[Aevo: Ribbon DOV Legacy Vault Attacked, Losses Approximately $2.7 Million]
Aevo officially stated that due to a smart contract update vulnerability, the Ribbon DOV legacy vault was attacked on December 12, resulting in a loss of approximately $2.7 million. The Aevo platform was not affected. The Ribbon vault has been shut down and will be decommissioned, with losses accounting for about 32% of total assets. Users will need to wait for the contract upgrade to be launched next week to withdraw funds. The claims window will be open from December 12, 2023, to June 12, 2026. Afterward, the DAO will liquidate remaining assets and distribute them to users who have withdrawn funds, with compensation capped at up to 19% of the missing funds or the remaining available amount.