Umbrae / Ignis (Base): DLMM pools drained; pause + white-hat return
7k USDC plus smaller WETH and cbBTC across several pools. Reporting describes unprivileged use of public pair / settlement-style functions to pull LP value.
The team paused pools via a 3-of-4 Ops Safe and negotiated an ~80% white-hat return. Research snapshot from firm alert threads: not a full 369 deep-dive.
Do not confuse with Pulse “Umbra” swap routers on the Risk board; this is a different Base DLMM product.
369 take
Public pair helpers and incomplete LP accounting are a live class even after audits. Pause authority and residual-balance checks matter when something goes wrong.
Pulse lesson: any concentrated-liquidity or custom pair contract with callable settlement paths needs the same access and accounting review: and names that rhyme (Umbra vs Umbrae) are not the same product.
Sources