On March 31, 2025, a hacker stole 2,930 ETH (valued at approximately $5.4 million) from the zkLend platform. However, while attempting to launder the stolen funds through Tornado Cash, the hacker fell victim to a phishing scam from a fake Tornado Cash website and lost the entire amount to another party.

The hacker later admitted their mistake and expressed regret, but the funds were already gone. Investigations are ongoing, but there is no confirmed link between the phishing scam and the initial zkLend hack.

See details on Etherscan: https://etherscan.io/idm?addresses=0xcf31e1b97790afd681723fa1398c5ead9f69b98c,0xd89b7236f4ea38a2afc1d614dc3de08a190f1ff5