Hack history / 2025 / Hack or exploit
Ribbon
Hack or exploit on Dec 12, 2025 · Improper Access Control
SOURCES AGREE ON DATE AND LOSS · 4 SOURCES
Lost
$2.7M
dollars at the time
Returned
none listed
as the sources state it
Rank
#620
among thefts by dollars lost
What happened
Aevo's legacy Ribbon DOV vaults were drained of $2.7 million on December 12, 2025. An oracle upgrade created a decimal mismatch (8 vs 18 decimals) with legacy assets. The attacker exploited a publicly-accessible oracle price-setting function and minimal collateral requirements to create undercollateralized positions and drain the vaults.
Details
- Date
- Dec 12, 2025
- Kind
- Hack or exploit
- Method
- Improper Access Control
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
Related incidents
Ribbon 2022 · Hack or exploit · $12K
Cork V1 2025 · Hack or exploit · $12M
ForceBridge 2025 · Hack or exploit · $3.9M
Nemo Yield Trading 2025 · Hack or exploit · $2.4M
Texture 2025 · Hack or exploit · $2.2M
Cork V1 2025 · Hack or exploit · $12M
ForceBridge 2025 · Hack or exploit · $3.9M
Nemo Yield Trading 2025 · Hack or exploit · $2.4M
Texture 2025 · Hack or exploit · $2.2M
Cite this page
SwanBluechip, "Ribbon hack, Dec 12, 2025: $2.7M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/hte5dc765d46/ (data as of 2026-10-31).