Umbrae / Ignis (Base): DLMM pools drained; pause + white-hat return
~11–12 Aug 2026: DefimonAlerts / Clara flagged an on-chain drain on Umbrae (Ignis AI Labs) DLMM pools on Base — roughly 25.7k USDC plus smaller WETH and cbBTC across several pools. Reporting describes unprivileged use of public pair / settlement-style functions to pull LP value. The team paused pools via a 3-of-4 Ops Safe and negotiated an ~80% white-hat return. Research snapshot from firm alert threads — not a full 369 deep-dive. Do not confuse with Pulse “Umbra” swap routers on the Risk board; this is a different Base DLMM product.
369 take: Public pair helpers and incomplete LP accounting are a live class even after audits. Pause authority and residual-balance checks matter when something goes wrong. Pulse lesson: any concentrated-liquidity or custom pair contract with callable settlement paths needs the same access and accounting review — and names that rhyme (Umbra vs Umbrae) are not the same product.