Iran Crypto Hack: $90M Lost – Pro-Israel Group Claimed
- Nobitex, Iran's largest cryptocurrency exchange, suffered a cyberattack wednesday resulting in the theft of more than $90 million.
- The stolen funds were drained from the exchange's platform wallets and directed to addresses containing anti-government messages.
- A pro-israel hacking group known as Gonjeshke Darande, or Predatory Sparrow, claimed responsibility for the Nobitex hack.
Iran’s largest crypto exchange, Nobitex, has been hit by a devastating cyberattack, with over $90 million stolen, according to reports. A pro-israel group, “Predatory Sparrow,” has claimed responsibility for the Nobitex crypto hack. The attack, happening amidst growing tensions between Iran and Israel, suggests a potential escalation of geopolitical conflict in the digital realm. The hackers directed stolen funds to addresses containing anti-government messages, implying a symbolic act of destruction rather than pure financial gain. News Directory 3 is following the story closely. Is this the start of a new front in the ongoing conflict? Discover what’s next as the investigation unfolds.
$90 Million Crypto Exchange hack Hits iran Amid Israel Conflict
Nobitex, Iran’s largest cryptocurrency exchange, suffered a cyberattack wednesday resulting in the theft of more than $90 million. The incident, according to blockchain analytics firm Elliptic, comes amid escalating tensions between Iran and Israel.
The stolen funds were drained from the exchange’s platform wallets and directed to addresses containing anti-government messages. These messages specifically referenced Iran’s Islamic Revolutionary Guard Corps (IRGC), suggesting a politically motivated attack.
A pro-israel hacking group known as Gonjeshke Darande, or Predatory Sparrow, claimed responsibility for the Nobitex hack. The group also stated its intention to release the exchange’s source code. Elliptic confirmed that Nobitex was offline following the group’s proclamation. Predatory Sparrow also claimed credit for a seperate cyberattack targeting Iran’s state-owned Bank sepah earlier in the week.
The cyberattack on the cryptocurrency exchange occurred as fighting intensified between Israel and Iran, wiht both countries exchanging missile fire. Iran’s Supreme Leader Ayatollah Ali Khamenei threatened the U.S. with “irreparable damage” Wednesday after President Donald Trump demanded Iran’s surrender.
While a direct link between Predatory Sparrow and the movement of the stolen assets remains unconfirmed, Elliptic noted the funds were transferred to cryptographic addresses seemingly beyond the hackers’ control. This suggests the destruction of the funds was a symbolic gesture rather than a theft for financial gain. The Nobitex crypto exchange hack highlights the increasing role of cryptocurrency in geopolitical conflicts.
Elliptic’s research further connects the nobitex exchange to the IRGC, a branch of the iranian military designated as a terrorist association by the U.S., the United Kingdom, the European Union, and Canada.Previous investigations have also linked the platform to sanctioned IRGC-linked ransomware operations and individuals closely associated with Khamenei.
Blockchain data indicates activity between the Nobitex exchange and digital wallets associated with Hamas, Palestinian Islamic Jihad, and the Houthis.
Elliptic said it is actively monitoring virtual asset flows connected to Iranian entities and has updated its compliance tools to address emerging threats within the region’s cryptocurrency ecosystem. The firm continues to investigate the Nobitex cryptocurrency exchange hack and its potential implications.
What’s next
Elliptic will continue to monitor the situation and provide updates on any further developments related to the Nobitex hack and its impact on the cryptocurrency landscape in the Middle East.