Ribbon Finance has suffered an attack attributed to a compromised project management address, according to analyses by ChainCatcher and GoPlus. The attackers utilized the address 0x657CDE to deploy a malicious price proxy, manipulating expiration times for assets including stETH, Aave, PAXG, and LINK to December 12, 2025, at 16:00 (UTC+8). This exploitation of a contract error allowed the attackers to profit, underscoring the need for vigilance in altcoin markets amid potential volatility.