The hacker who attacked zkLend in February 2025 lost $5.4 million in ETH due to a phishing site when trying to launder stolen funds through Tornado Cash.
Incident Overview
The analytics firm Lookonchain reported that the hacker who stole 2,930 ETH from zkLend fell victim to phishing, losing all funds while attempting to hide them using Tornado Cash. The hacker admitted in an on-chain message that funds were taken by a phishing site.
Phishing in the Crypto Space
Tornado Cash, a service for anonymizing transactions, often becomes a target for phishing attacks. Increasingly more scammers create fake websites to stealthily steal users' assets. The hacker's fall to phishing illustrates that even cybercriminals are not immune to fraud.
Impact on the Crypto Community
The incident highlights rising crypto scams and security issues. In Q1 2025, a record-breaking $1.64 billion was stolen in various crypto attacks, underscoring the need for enhanced protection.
For zkLend users and the wider crypto community, this serves as a cautionary tale about the diverse threats in the digital asset domain.