Aevo (formerly Ribbon Finance) officially stated that its Ribbon Legacy DOV vault was attacked yesterday due to a smart contract update vulnerability, resulting in a loss of approximately $2.7 million. The team immediately launched an investigation to identify the root cause of the vulnerability and is collaborating with centralized exchanges and security partners to track and flag the stolen funds. Aevo noted that although the attackers bypassed the existing Immunefi bug bounty mechanism, white-hat negotiated solutions remain available. The official statement also emphasized that this incident did not affect the Aevo exchange or its staking users; the platform remains secure and operational. Regarding depositors in the Ribbon Legacy vault, Aevo stated that it is developing a follow-up plan and expects to release further updates within 24 hours, followed by a full incident review report.