- Iranian crypto exchange Nobitex was hacked for over $90M by Israeli-linked group Gonjeshke Darande, who claim it’s a political strike.
- Stolen funds were sent to unusable vanity addresses, suggesting the hack wasn’t financially motivated.
- Nobitex confirmed the attack but not the amount stolen, as users now face both security risks and uncertainty.
Iran’s largest crypto exchange, Nobitex, has been hit by a massive cyberattack, losing around $90 million in digital assets. The attack was claimed by hacktivist group Gonjeshke Darande, which is reportedly linked to Israeli intelligence. The group issued a stark warning that Nobitex’s internal data and source code would be leaked soon, placing any remaining funds on the platform at risk.
Political Motives Behind the Breach
The attack doesn’t appear to be about money. According to blockchain security firm Elliptic, the funds were transferred to crypto wallets with offensive, politically charged vanity addresses. These addresses were created using brute force methods but can’t actually be accessed—effectively burning the funds and sending a message. One such address read: “TKFuckiRGCTerroristsNoBiTEXy2r7mNX.”
Gonjeshke Darande accused Nobitex of helping Iran fund terrorism and bypass global sanctions, labeling the exchange a “core part” of the country’s financial network.
Suspicious Activity Flagged Before Confirmation
Crypto investigator ZachXBT was the first to notice odd fund movements—initially tallying $81.7 million in assets like TRX, BTC, and DOGE. That figure was later updated to over $82 million. Addresses such as “1FuckiRGCTerroristsNoBiTEXXXaAovLX” and “DFuckiRGCTerroristsNoBiTEXXXWLW65t” were part of the exploit.
While Nobitex confirmed the breach in a post on X, the exchange didn’t officially comment on how much was taken. The group’s warnings about releasing Nobitex’s source code are raising fears that any assets still on the platform could be at risk of vanishing.
Nobitex Faces a Crisis Beyond the Hack
With the promise of a source code leak hanging overhead, Nobitex is dealing with more than financial loss—it’s facing a full-blown credibility meltdown. The attack comes amid escalating tensions between Iran and Israel, with cyberattacks increasingly becoming weapons in this broader conflict.
Gonjeshke Darande has previously targeted Iranian infrastructure, including steel plants and gas stations, making this crypto hack the latest in a series of politically charged operations.
For users still holding funds on Nobitex, the message is clear: move them now—or risk losing everything.
