The hacker behind the $9.6 million exploit of the decentralized money-lending protocol zkLend in February claims they’ve just fallen victim to a phishing website impersonating Tornado Cash, resulting in the loss of a significant portion of the stolen funds.
In a message sent to zkLend through Etherscan on March 31, the hacker claimed to have lost 2,930 Ether ( data-ct-non-breakable=”null” href=”https://cointelegraph.com/ethereum-price” rel=”null” target=”null” text=”null” title=”null”>ETH) from the stolen funds to a data-ct-non-breakable=”null” href=”https://cointelegraph.com/learn/articles/what-is-a-phishing-attack-in-crypto-and-how-to-prevent-it” rel=”null” target=”null” text=”null” title=”null”>phishing website posing as a front-end for Tornado Cash.
In a series of March 31 transfers, the zkLend thief data-ct-non-breakable=”null” href=”https://etherscan.io/address/0xd89b7236f4ea38a2afc1d614dc3de08a190f1ff5″ rel=”null” target=”null” text=”null” title=”null”>sent 100 Ether at a time to an address named…

![[CITYPNG.COM]White Google Play PlayStore Logo – 1500×1500](https://startupnews.fyi/wp-content/uploads/2025/08/CITYPNG.COMWhite-Google-Play-PlayStore-Logo-1500x1500-1-630x630.png)