A ZK Lend protocol hacker, who stole $5.5 million worth of ETH from the project, claims to have lost all their funds through a phishing site instead of Tornado Cash. According to Etherscan, the hacker’s address was targeted in an apparent hack-and-leak attack, and the stolen funds were sent to a known phishing site before being moved to another intermediary. While ZKLend is working with authorities and exchanges to recover the funds, the hacker has claimed their funds have been lost through this phishing attempt, further fueling speculation about potential involvement of the same entity behind both exploits. The ZKLend team continues to investigate the incident, but no conclusive evidence yet confirms the full scope of the loss. A key detail is the suspected involvement of a known spoof site that has been active for years, and which may have been deliberately exploited by the hacker. The investigation into this incident will likely reveal crucial insights into the workings of such phishing sites and their role in cryptocurrency security breaches. Notably, ZKLend’s efforts to work with exchanges and central authorities are likely to shed further light on this case.