zkLend hacker claims losing stolen ETH to Tornado Cash phishing site

The hacker behind the $9.6 million exploit of the decentralized money-lending protocol zkLend in February claims they’ve just fallen victim to a phishing website impersonating Tornado Cash, resulting in the loss of a significant portion of the stolen funds.
In a message sent to zkLend through Etherscan on March 31, the hacker claimed to have lost 2,930 Ether (ETH) from the stolen funds to a phishing website posing as a front-end for Tornado Cash.
In a series of March 31 transfers, the zkLend thief sent 100 Ether at a time to an address named Tornado.Cash: Router, finishing with three deposits of 10 Ether.
“Hello, I tried to move funds to a Tornado, but I used a phishing website, and all the funds have been lost. I am devastated. I am terribly sorry for all the havoc and losses caused,” the hacker said.
The hacker behind the zkLend exploit claims to have lost most of the funds to a phishing website posing as a front-end for Tornado Cash. Source: Etherscan
“All the 2,930 Eth have been taken by that site owners. I do not have coins. Please redirect your efforts towards those site owners to see if you can recover some of the money,” they added.
zkLend responded to the message by asking the hacker to “Return all the funds left in your wallets” to the zkLend wallet address. However, according to Etherscan, another 25 Ether was then sent to a wallet listed as Chainflip1.
Earlier, another user warned the exploiter about the error, telling them, “don’t celebrate,” because all the funds were sent to the scam Tornado Cash URL.
“It is so devastating. Everything gone with one wrong website,” the hacker replied.
Another user warned the zkLend exploiter about the mistake, but it was too late. Source: Etherscan
How zkLend was exploited for $9.6 million
zkLend suffered an empty market exploit on Feb. 11 when an attacker used a small deposit and flash loans to inflate the lending accumulator, according to the protocol’s Feb. 14 post-mortem.
The hacker then repeatedly deposited and withdrew funds, exploiting rounding errors that became significant due to the inflated accumulator.
The attacker bridged the stolen funds to Ethereum and later failed to launder them through Railgun after protocol policies returned them to the original address.
Following the exploit, zkLend proposed the hacker could keep 10% of the funds as a bounty and offered to release the culprit from legal liability and scrutiny from law enforcement if the remaining Ether was returned.
Related: DeFi protocol SIR.trading loses entire $355K TVL in ‘worst news’ possible
The offer deadline of Feb. 14 passed with no public response from either party. In a Feb. 19 update to X, zkLend said it was now offering a $500,000 bounty for any verifiable information that could lead to the hacker being arrested and the funds recovered.
Losses to crypto scams, exploits and hacks totaled over $33 million, according to blockchain security firm CertiK, but dropped to $28 million after decentralized exchange aggregator 1inch successfully recovered its stolen funds.
Losses to crypto scams, exploits and hacks totaled nearly $1.53 billion in February. The $1.4 billion Feb. 21 attack on Bybit by North Korea’s Lazarus Group made up the lion’s share and took the title for largest crypto hack ever, doubling the $650 million Ronin bridge hack in March 2022.
Magazine: Lazarus Group’s favorite exploit revealed — Crypto hacks analysis
Bitcoin (BTC) $ 118,088.00
Ethereum (ETH) $ 3,739.11
XRP (XRP) $ 3.51
Tether (USDT) $ 1.00
BNB (BNB) $ 753.31
Solana (SOL) $ 181.69
USDC (USDC) $ 0.999876
Dogecoin (DOGE) $ 0.270988
Lido Staked Ether (STETH) $ 3,724.26
Cardano (ADA) $ 0.868657
TRON (TRX) $ 0.316950
Wrapped stETH (WSTETH) $ 4,505.47
Hyperliquid (HYPE) $ 46.45
Wrapped Bitcoin (WBTC) $ 117,943.00
Stellar (XLM) $ 0.470384
Sui (SUI) $ 3.92
Chainlink (LINK) $ 19.36
Hedera (HBAR) $ 0.273916
Bitcoin Cash (BCH) $ 546.60
Avalanche (AVAX) $ 25.16
Wrapped eETH (WEETH) $ 3,996.60
Shiba Inu (SHIB) $ 0.000016
Litecoin (LTC) $ 116.89
LEO Token (LEO) $ 8.99
WETH (WETH) $ 3,735.52
Toncoin (TON) $ 3.28
Polkadot (DOT) $ 4.51
USDS (USDS) $ 0.999953
Binance Bridged USDT (BNB Smart Chain) (BSC-USD) $ 1.00
WhiteBIT Coin (WBT) $ 44.56
Coinbase Wrapped BTC (CBBTC) $ 117,960.00
Uniswap (UNI) $ 10.57
Ethena USDe (USDE) $ 1.00
Pepe (PEPE) $ 0.000014
Monero (XMR) $ 323.77
Bitget Token (BGB) $ 4.95
Aave (AAVE) $ 325.84
Bittensor (TAO) $ 421.71
Cronos (CRO) $ 0.122062
Ethereum Classic (ETC) $ 24.75
NEAR Protocol (NEAR) $ 3.00
Dai (DAI) $ 1.00
Ethena Staked USDe (SUSDE) $ 1.18
Aptos (APT) $ 5.33
Pi Network (PI) $ 0.449462
Ondo (ONDO) $ 1.06
Internet Computer (ICP) $ 6.01
Ethena (ENA) $ 0.497037
OKB (OKB) $ 49.31
Jito Staked SOL (JITOSOL) $ 220.42
Mantle (MNT) $ 0.809332
Bonk (BONK) $ 0.000034
BlackRock USD Institutional Digital Liquidity Fund (BUIDL) $ 1.00
Kaspa (KAS) $ 0.097532
Algorand (ALGO) $ 0.295318
Arbitrum (ARB) $ 0.488919
VeChain (VET) $ 0.028847
Cosmos Hub (ATOM) $ 5.20
POL (ex-MATIC) (POL) $ 0.253615
Render (RENDER) $ 4.39
Binance-Peg WETH (WETH) $ 3,757.98
USD1 (USD1) $ 1.00
Worldcoin (WLD) $ 1.24
Official Trump (TRUMP) $ 10.72
Gate (GT) $ 17.70
Artificial Superintelligence Alliance (FET) $ 0.804519
Sei (SEI) $ 0.360907
Filecoin (FIL) $ 2.92
Pudgy Penguins (PENGU) $ 0.031345
Fasttoken (FTN) $ 4.51
Sky (SKY) $ 0.085485
SPX6900 (SPX) $ 1.93
Binance Staked SOL (BNSOL) $ 193.27
sUSDS (SUSDS) $ 1.06
Kelp DAO Restaked ETH (RSETH) $ 3,911.10
Rocket Pool ETH (RETH) $ 4,254.89
Quant (QNT) $ 117.24
Jupiter (JUP) $ 0.562321
Lombard Staked BTC (LBTC) $ 118,157.00
XDC Network (XDC) $ 0.102746
Jupiter Perpetuals Liquidity Provider Token (JLP) $ 5.00
Celestia (TIA) $ 2.17
KuCoin (KCS) $ 12.04
Pump.fun (PUMP) $ 0.004274
First Digital USD (FDUSD) $ 0.999987
Injective (INJ) $ 14.96
USDtb (USDTB) $ 0.999639
Fartcoin (FARTCOIN) $ 1.44
Flare (FLR) $ 0.020749
Story (IP) $ 4.83
StakeWise Staked ETH (OSETH) $ 3,924.27
Stacks (STX) $ 0.881781
Optimism (OP) $ 0.789264
Mantle Staked Ether (METH) $ 3,998.33
FLOKI (FLOKI) $ 0.000142
USDT0 (USDT0) $ 1.00
Liquid Staked ETH (LSETH) $ 4,032.51
NEXO (NEXO) $ 1.35
Curve DAO (CRV) $ 0.964970
Sonic (S) $ 0.397781