A technical investigation into two recent incidents — the $2.7M drain affecting Ribbon/Aevo and the Zerobase front-end takeover — with practical defensive guidance for DeFi teams and advanced users.