zkLend gets hacked, hacker offered 10% bounty in return of 90% of the funds

Earlier today, money-market protocol zkLend faced an exploit and paused withdrawals on the protocol. In a recent X post, the zkLend team confirmed that the protocol had been hacked.

The zkLend team left a message for the hacker via the Eth ZEND token deployer account, in which it urged the hacker to keep 10% of the funds and to return the remaining amount i.e. 3,300 ETH. If the hacker returns 90% of the funds, the zkLend team will treat it as a whitehat incident and won’t take legal action. It said, “Upon receiving the transfer, we agree to release from any and all liability regarding the attack.”

The hacker has been given a deadline of 00:00 UTC, 14th February 2024, to take action. After that, the team will proceed with steps to prosecute the exploiter.

In a more recent X post, the team mentioned that it is actively pursuing the identification of the hacker and tracking the funds.

To our users:

We are actively tracking the funds and pursuing the identification of the hacker, in collaboration with @StarkWareLtd, the @StarknetFndn, @zeroshadow_io (formerly @chainalysis Incident Response), Binance Security Team, and @HypernativeLabs.

We are committed to…

— zkLend (@zkLend) February 12, 2025

Cryptopolitan Academy: Are You Making These Web3 Resume Mistakes? - Find Out Here