Close Menu
Cryprovideos
    What's Hot

    Ethereum ETFs on a 15-Day Influx Streak: Is Pectra Bringing Institutional Capital?

    June 8, 2025

    Solana Teases a Breakout as Charts Present Stress Mounting – BlockNews

    June 8, 2025

    Pi Community Urged to Act as Customers Demand Token Transparency

    June 8, 2025
    Facebook X (Twitter) Instagram
    Cryprovideos
    • Home
    • Crypto News
    • Bitcoin
    • Altcoins
    • Markets
    Cryprovideos
    Home»Altcoins»zkLend hacker claims shedding stolen ETH to Twister Money phishing web site
    zkLend hacker claims shedding stolen ETH to Twister Money phishing web site
    Altcoins

    zkLend hacker claims shedding stolen ETH to Twister Money phishing web site

    By Crypto EditorApril 1, 2025No Comments3 Mins Read
    Share
    Facebook Twitter LinkedIn Pinterest Email


    The hacker behind the $9.6 million exploit of the decentralized money-lending protocol zkLend in February claims they’ve simply fallen sufferer to a phishing web site impersonating Twister Money, ensuing within the lack of a good portion of the stolen funds.

    In a message despatched to zkLend by means of Etherscan on March 31, the hacker claimed to have misplaced 2,930 Ether (ETH) from the stolen funds to a phishing web site posing as a front-end for Twister Money. 

    In a collection of March 31 transfers, the zkLend thief despatched 100 Ether at a time to an tackle named Twister.Money: Router, ending with three deposits of 10 Ether.

    “Good day, I attempted to maneuver funds to a Twister, however I used a phishing web site, and all of the funds have been misplaced. I’m devastated. I’m terribly sorry for all of the havoc and losses induced,” the hacker mentioned.

    zkLend hacker claims shedding stolen ETH to Twister Money phishing web site

    The hacker behind the zkLend exploit claims to have misplaced many of the funds to a phishing web site posing as a front-end for Twister Money. Supply: Etherscan

    “All the two,930 Eth have been taken by that web site homeowners. I do not need cash. Please redirect your efforts in direction of these web site homeowners to see should you can recuperate among the cash,” they added.

    zkLend responded to the message by asking the hacker to “Return all of the funds left in your wallets” to the zkLend pockets tackle. Nonetheless, in line with Etherscan, one other 25 Ether was then despatched to a pockets listed as Chainflip1. 

    Earlier, one other consumer warned the exploiter concerning the error, telling them, “don’t rejoice,” as a result of all of the funds had been despatched to the rip-off Twister Money URL.

    “It’s so devastating. All the things gone with one unsuitable web site,” the hacker replied.

    One other consumer warned the zkLend exploiter concerning the mistake, however it was too late. Supply: Etherscan

    How zkLend was exploited for $9.6 million

    zkLend suffered an empty market exploit on Feb. 11 when an attacker used a small deposit and flash loans to inflate the lending accumulator, in line with the protocol’s Feb. 14 autopsy. 

    The hacker then repeatedly deposited and withdrew funds, exploiting rounding errors that turned vital because of the inflated accumulator. 

    The attacker bridged the stolen funds to Ethereum and later didn’t launder them by means of Railgun after protocol insurance policies returned them to the unique tackle. 

    Following the exploit, zkLend proposed the hacker may hold 10% of the funds as a bounty and supplied to launch the offender from authorized legal responsibility and scrutiny from legislation enforcement if the remaining Ether was returned.

    Associated: DeFi protocol SIR.buying and selling loses complete $355K TVL in ‘worst information’ doable

    The provide deadline of Feb. 14 handed with no public response from both celebration. In a Feb. 19 replace to X, zkLend mentioned it was now providing a $500,000 bounty for any verifiable info that might result in the hacker being arrested and the funds recovered.

    Losses to crypto scams, exploits and hacks totaled over $33 million, in line with blockchain safety agency CertiK, however dropped to $28 million after decentralized change aggregator 1inch efficiently recovered its stolen funds. 

    Losses to crypto scams, exploits and hacks totaled practically $1.53 billion in February. The $1.4 billion Feb. 21 assault on Bybit by North Korea’s Lazarus Group made up the lion’s share and took the title for largest crypto hack ever, doubling the $650 million Ronin bridge hack in March 2022. 

    Journal: Lazarus Group’s favourite exploit revealed — Crypto hacks evaluation