Aevo (formerly Ribbon Finance) suffers from a smart contract vulnerability attack. According to the official notice, the historical Ribbon DOV vault was exploited during a contract update yesterday, and the hacker successfully siphoned approximately $2.7 million worth of assets. Currently, all Ribbon vaults have been urgently frozen and will be officially taken offline. Users who want to withdraw funds must wait until the contract upgrade is complete and follow the standard procedure; the upgrade is expected to go live next week, with a specific date to be announced separately. This incident again reminds everyone that in the DeFi ecosystem, contract risks should always come first—no matter how solid the project background is, updates must be handled with caution.