Pro-Israel Hackers Burn $90 Million in Cryptocurrency Stolen from Iran’s Nobitex

A pro-Israel hacker group, known as “Gonjeshke Darande” or “Predatory Sparrow,” has taken responsibility for the destruction of over $90 million in cryptocurrency that was stolen from Iran’s largest exchange, Nobitex. The group utilized “vanity addresses” that are inaccessible and unrecoverable to burn the funds, effectively rendering them useless.

On June 18, the group posted an update on X, detailing that various cryptocurrencies, including Bitcoin, Ethereum, and Dogecoin, were sent to unspendable blockchain addresses. Some of these addresses contained anti-Iran messages, such as “FuckIRGCTerroristsNoBiTEX,” underscoring the political motivations behind the hack.

One of the Bitcoin wallets used in the operation had an invalid checksum, while Ethereum tokens were directed to the “0x…dead” burn address, a common method for permanently removing coins from circulation. This action highlights the technical sophistication of the hackers and their ability to manipulate blockchain technology to achieve their goals.

The attack occurred in the wake of Israeli airstrikes on Tehran’s nuclear facilities, emphasizing the increasing role of cryptocurrency in global conflicts. The hackers accused Nobitex of aiding the Iranian regime in evading sanctions and funding terrorist activities, adding a layer of geopolitical tension to the incident.

Blockchain security firms confirmed that the stolen funds were not transferred to exchanges or mixers but were indeed burned, making them irrecoverable. This confirmation adds credibility to the hackers' claims and underscores the effectiveness of their operation.

In response to the hack, Nobitex assured its users that all funds remain secure in cold storage. The platform stated that it had emptied its hot wallets as a precautionary measure and has sufficient reserves to cover any potential losses. This response aims to reassure users and maintain trust in the platform amidst the cyber tensions.

The hackers further escalated the situation by threatening to publish the source code and internal systems of Nobitex. They advised users to withdraw their funds immediately, putting additional pressure on the exchange, which has over 11 million users. This threat underscores the hackers' intent to disrupt Nobitex's operations and expose its vulnerabilities.