zkLend: Phishing Site Funds Stolen by Hacker Added to Tracking Efforts

BlockBeats News, April 1st, zkLend officially announced that last night zkLend's attacker attempted to use Tornado Cash to mix 2930 ETH of stolen funds, and interacted with the known Tornado Cash phishing website tornadoeth[.]Cash, thereby losing the funds to the phishing website.

The phishing website appears to have been operating for over 5 years. At this stage, the security team has no concrete evidence linking the phishing site to the attacker. As a precautionary measure, zkLend has included these new wallet addresses from the phishing site in its fund tracking efforts.

Since last night, funds have been flowing heavily from wallets controlled by the attacker. Both the security and zkLend teams are monitoring in real-time and are in contact with CEX and authorities. The team will continue its efforts to trace these funds.