What’s puzzling me is that two independent channels/servos failed simultaneously. For two servos to fail like this is unusual at the very least and unlikely IMO.

Did you make sure there was NO linkage binding and end-point travel values were not allowing the servos to be over driven?

What type of radio/RX? Did all other functions work when the ailerons malfunctioned?