News linked to both this project and an event.
According to The Block, Solana’s privacy layer Umbra and token distribution platform Streamflow have launched a private token vesting feature, enabling projects to conduct token vesting and distribution on-chain in a confidential manner. The solution is powered by Arcium’s cryptographic execution engine, preserving distribution mechanisms such as time locks and price conditions while keeping the actual token transfers private. The report states that this initiative aims to reduce front-running and on-chain monitoring risks during token unlock events. Streamflow says its platform currently serves over 1.3 million users and more than 40,000 projects.
According to an official post by Umbra (@UmbraCash), the privacy payment protocol Umbra was used to transfer funds related to a recent hacking incident, involving 349 ETH (approximately $800,000). Umbra stated that, as its privacy address system primarily protects the recipient’s identity—not the sender’s—it offers limited practical assistance to hackers attempting to obscure the origin of stolen funds. All stolen funds remain identifiable and traceable. The team has been in active communication and collaboration with security researchers. Umbra also noted that the protocol is powered entirely by autonomous smart contracts; thus, the team cannot prevent anyone from using the contracts or self-hosted frontend versions. In support of fund recovery efforts, the team placed the hosted frontend into maintenance mode at 6:45 a.m. ET on April 21. Access will be restored once it is confirmed that doing so will not impede the recovery process. The protocol itself continues operating normally, and all funds held within privacy addresses remain secure.
On-chain investigator ZachXBT updated that funds related to the KelpDAO attack have begun moving: approximately $1.5 million has been cross-chained from Ethereum Mainnet to the Bitcoin network via Thorchain, and roughly $78,000 has been transferred via Umbra. The attacking address initially sourced its funds from Tornado Cash, and fund laundering and cross-chain transfers are ongoing.