EraLend’s team said the hacker could keep 10% of the stolen funds as a white hat bounty. The deal was valid if the hacker returned 90% of the assets to wallet address 0x9eEE479DCf6075a0cb905c27e8F952910c3bb69D before 2 PM UTC on July 27. Etherscan data showed that the address provided by EraLend sits almost empty, meaning that the exploiter did not take up the offer to return funds. The zkSync-based lending protocol lost $3.4 million this week due to a read-only reentrancy bug
