($5.4M) from zkLend, only to fall for a fake TornadoCash phishing scam, handing all the Ethereum to a second unrelated hacker.