According to Odaily, blockchain analyst @im23pds has suggested that the recent attack on zkLend may be connected to a phishing website mimicking Tornado Cash, potentially orchestrated by the same individual. The attacker's address is linked to the ENS domain safe-relayer.eth, which has been flagged on Etherscan. Further tracking is possible through its transaction history.
Previously, it was reported that the hacker accidentally clicked on a phishing site, resulting in the theft of 2,930 ETH being stolen from them. Following this incident, the hacker reached out to zkLend through on-chain transactions to apologize and returned a portion of the remaining funds.