From Cointelegraph

March 31, 2025 11:12:00 pm:

A hacker who stole $9.6 million from zkLend in February lost most of the funds to a phishing website posing as Tornado Cash. The hacker sent Ether to a fake Tornado.Cash: Router address. zkLend asked for the funds back, but the hacker sent 25 Ether to Chainflip1. Another user warned the hacker about the scam.

zkLend was exploited on Feb. 11 when an attacker used flash loans to inflate the lending accumulator, exploiting rounding errors. The hacker bridged the funds to Ethereum but failed to launder them through Railgun. zkLend offered the hacker a 10% bounty and immunity from legal action if the Ether was returned. Losses from crypto scams and hacks reached nearly $1.53 billion in February.

Read more at CoinTelegraph: zkLend hacker claims losing stolen ETH to Tornado Cash phishing site