ZkLend, a decentralized lending protocol constructed on Starknet, has confirmed that the hacker accountable for its February exploit misplaced a good portion of the stolen funds to a phishing rip-off.
In an April 1 publish on X, ZkLend revealed that the attacker tried to launder 2,930 ETH, value round $5.4 million, by way of crypto mixer Twister Money.
Nonetheless, as an alternative of utilizing the official platform, the hacker mistakenly interacted with a malicious phishing web site: tornadoeth[.]money. Because of this, one other social gathering efficiently drained the ETH.
Blockchain analytics agency Lookonchain corroborated ZkLend’s findings, confirming the lack of 2,930 ETH as a result of phishing incident.
Curiously, the hacker later despatched an on-chain message to ZkLend’s deployer handle, admitting the blunder. Within the message, the attacker wrote:
“I attempted to maneuver funds to Twister however used a phishing web site. All of the funds have been misplaced. I’m devastated and sorry for the havoc and losses brought on. I don’t have the cash anymore.”
The hacker urged ZkLend to pursue the phishing web site operators as an alternative.
‘No connection’
This sudden flip has fueled hypothesis that the unique hacker and the phishing scammers could be related, although no proof has surfaced to help that idea.
In the meantime, ZkLend acknowledged that the phishing web site seems to have been energetic for over 5 years. The challenge furthered that no concrete proof hyperlinks the phishing operators to the unique hacker.
Nonetheless, pockets addresses tied to the phishing web site have been added to ongoing fund-tracing efforts.
The staff additionally famous elevated exercise from wallets related to the hacker. Safety consultants, centralized exchanges (CEXs), and related authorities have been monitoring these actions in real-time.
ZkLend was exploited in February, with blockchain safety agency Cyvers estimating the loss at roughly $9.5 million.
The protocol supplied the attacker a ten% bounty in the event that they returned the remaining. Nonetheless, the hacker ignored the proposal and saved the funds, prompting ZkLend to associate with safety groups from Starknet, StarkWare, and Binance in a broader fund restoration effort.
