Ignis AI Labs' Umbrae DLMM pools on Base were paused; CEO negotiates return of 80% of ~$25.7k USDC + 0.33 WETH + 0.014 cbBTC extracted across five pools.
Security & Exploits ·
Approximately $25,745.68 in USDC, 0.33 WETH, and 0.014 cbBTC were extracted from 15 paused Umbrae DLMM pools on Base, operated by Ignis AI Labs. The CEO negotiated a settlement in which the party responsible for the extraction would retain 20% as a bounty and return the remaining 80%—totaling $20,596.55 USDC, 0.263 WETH, and 0.011 cbBTC—to a 3-of-4 multisig Safe controlled by the company. The CEO provided on-chain evidence including transaction hash and block number to verify the amounts extracted across the five pools.
The settlement message came from a Safe at 0xa01f8cAc471ec71EE48E8Fe085B3FD8571e70A13 on Base mainnet, which the CEO confirmed held authority over the pools and issued the pause. The CEO instructed the counterparty to send the recovered 80% to that same Safe address and emphasized not to use alternative addresses, including the CEO's personal wallet.
What remains unclear is how the extraction occurred, whether it exploited a vulnerability in Umbrae's design, and whether the full recovery will be completed or the settlement terms honored by both parties.