The hacker, who attacked the Zkled lending protocol based on Starknet, himself became the victim of Fishing. He lost the stolen 2 930 ETH, trying to wash them through a fake cryptomixer Tornado Cash.

According to De.fi Antivirus Web3, the attacker mistakenly transferred the funds to the Tornado Cash fake site in the hope of “Oblast Traces”. When the unlucky hacker realized that he had lost the abducted funds, he in desperation sent a message to the Zklend deployment address, recognizing his mistake. He apologized for the February attack and called on Zklend developers to focus on the investigation of the Fisher’s activities.

“I tried to transfer funds to Tornado Cash, but took advantage of the phishing site. All funds are lost. I am devastated, ”the hacker wrote.

When the hacker led $ 5 million from Zklend, the protocol team tried to contact him by offering a reward. The hacker could leave 10% of the stolen cryptocurrencies if he agreed to return them until February 14. However, the attacker ignored the appeal of the developers, so they were forced to apply to law enforcement agencies. To track funds, the platform attracted security experts from Starknet Foundation, Starkware and Binance Security.

According to IMMUNEFI analysts, the first three months of 2025 became the worst damage from hacker attacks – the losses of crypto projects amounted to $ 1.64 billion. The protocols of decentralized finance (Defi) were most affected – they lost $ 106.8 million in 38 incidents.