Umbra states that in the recent KelpDAO rsETH cross-chain bridge attack, approximately 349 ETH (about $800k) was transferred through its protocol, denying earlier claims of larger-scale fund flows. Umbra points out that its privacy mechanism is mainly used to hide the recipient's identity and has limited effect in concealing the source of funds; the on-chain path of the stolen funds can still be traced. Currently, the project team has collaborated with security researchers and switched its official hosted front end to maintenance mode, but the underlying contracts remain operational.