Aevo's DOV Vault Security Vulnerability Emerges, Ribbon's Historical Vault Exploited with Losses of $2.7 Million

Aevo recently disclosed that its DOV vault in collaboration with Ribbon was attacked due to a flaw in the smart contract. According to details, this security incident caused the vault's net value to decrease by approximately 32%, involving a total of $2.7 million.

**Important Information Users Need to Know Immediately**

Aevo has decided to suspend the normal operation of all Ribbon series DOV vaults, and all vaults will be phased out gradually. Affected users need to proactively withdraw their funds; the platform will not automatically refund, so holders should pay immediate attention to the withdrawal deadline.

According to a DAO community voting decision, users will be able to withdraw funds at a 19% discount, which is a compensation plan confirmed through governance voting. Compared to the actual 32% loss suffered by the vault, the discounted withdrawal somewhat protects part of the principal for users.

**Time Window and Follow-up Arrangements**

The withdrawal period is set from December 12 to June 12, providing holders with nearly half a year to operate. After the deadline, the platform will conduct a final settlement and redistribute any remaining assets in the vault.

An emergency upgrade plan for the smart contract is currently under development. The official team has announced that the related update is expected to be released next week, with a detailed announcement to follow separately. After the upgrade, the operation mechanism of DOV-related vaults will be strengthened to prevent similar vulnerabilities from occurring again.

Users should check their holdings as early as possible and complete the withdrawal within the window to avoid additional losses after the deadline.