Zklend Hacker just laundered money through a tornado cash phishing scam and was just cut down while laundering $5.4 million in ETH. He then sent a message on the chain to the Zklend developers expressing remorse, which brought a month of comedy show to the community.
Zklend Hacker wiped out 2,930 ETH when laundering money through tornado cash
The February attack on Starknet-based loan agreement Zklend resulted in losses of approximately 3,666 ETH, worth approximately $9.5 million. Recently, hackers have tried to launder money by using tornado cash as part of 2,930 ETH (2,930 ETH). Yesterday, Zklend Hacker performed multiple transfers, sending 100 ether coins per transaction to the address marked Tornado. Cash: Router: Router and ends with a final deposit of 10 pieces of 10 ether each. He mistakenly clicked on a phishing website that imitated the service, resulting in an immediate loss of all 2,930 ETH.
In a desperate move, the hacker sent a “heartfelt letter” to Zklend, which later leaked online, turning the incident into a public sight and ridiculed it in the cryptocurrency community.
Source: Etherscan
Within Zklend Hack, for $9.6 million
On February 12, 2025, Zklend, a decentralized loan agreement on the Starknet blockchain, suffered significant exploitation, resulting in the theft of $9.48 million (3,666 ETH). Hackers exploited the accuracy vulnerability of decimals in Zklend’s smart contracts, allowing them to drain funds from the protocol pool.
Source: LinkedIn
The hacker first bridges the stolen assets to Ethereum. He then summed it up to them through the Privacy Agreement Track Gun. However, the railway gun policy forced him to return the funds to his original address. The violation has sparked serious concerns about Defi security. It resulted in $1.64 billion in cryptocurrency losses in the first quarter of 2025.
In response, Zklend suspended withdrawals and deposits to mitigate further losses and investigated contract logic flaws. The agreement provides hackers with a 10% “White Hat” bounty (3,300 ETH) to refund the remaining funds. On March 5, Zklend opened a recovery portal that enables users to claim losses – refunds and partial refunds to unaffected pools and provide recovery pool claims for affected individuals while working to rebuild the trust of the platform.
Zklend is a decentralized currency market protocol on Starknet that combines ZK-Rollup scalability with Ethereum’s security. It enables users to effectively deposit, borrow and lend assets in a trustless environment. Zklend is launched to enhance Defi accessibility, providing excellent transaction speed and cost savings, making it a promising player in the lending space.
