{"id":3331,"date":"2025-06-19T05:03:07","date_gmt":"2025-06-19T05:03:07","guid":{"rendered":"https:\/\/bitunikey.com\/news\/over-90m-stolen-from-irans-nobitex-exchange-burnt-by-pro-israel-hacker-group\/"},"modified":"2025-06-19T05:03:08","modified_gmt":"2025-06-19T05:03:08","slug":"over-90m-stolen-from-irans-nobitex-exchange-burnt-by-pro-israel-hacker-group","status":"publish","type":"post","link":"https:\/\/bitunikey.com\/news\/over-90m-stolen-from-irans-nobitex-exchange-burnt-by-pro-israel-hacker-group\/","title":{"rendered":"Over $90M stolen from Iran\u2019s Nobitex exchange burnt by pro-Israel hacker group"},"content":{"rendered":"<p><\/p>\n<div class=\"post-detail__content blocks\">\n<p class=\"is-style-lead\">After breaching Iran\u2019s largest crypto exchange, the pro-Israel hacker group Gonjeshke Darande claimed to have destroyed more than $90 million in digital assets taken from Nobitex\u2019s wallets.<\/p>\n<p>In a June 18 <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/x.com\/gonjeshkedarand\/status\/1935412212320891089?s=46&amp;t=nznXkss3debX8JIhNzHmzw\" target=\"_blank\">update<\/a> via X, the group said it had burned the funds across multiple blockchains using \u201cvanity addresses\u201d that contain no recoverable private keys, effectively rendering the assets permanently inaccessible.<\/p>\n<p>This follows the high-profile exploit of Nobitex, in which over $90 million in Bitcoin (BTC), Ethereum (ETH), Dogecoin (DOGE), and other tokens were drained from hot wallets. The attackers had originally framed the breach as a direct response to Nobitex\u2019s alleged role in helping the Iranian regime circumvent sanctions and fund terrorism.\u00a0<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">12 hours ago<br \/>8 burn addresses burned $90M from the wallets of the regime&#8217;s favorite sanctions violation tool, Nobitex.<\/p>\n<p>12 hours from now<br \/>The source-code of Nobitex will be open to the public, and Nobitex\u2019s walled garden will be without walls. Where do you want your assets to be?\u2026<\/p>\n<p>\u2014 Gonjeshke Darande (@GonjeshkeDarand) <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/twitter.com\/GonjeshkeDarand\/status\/1935412212320891089?ref_src=twsrc%5Etfw\" target=\"_blank\">June 18, 2025<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>The group, also known as Predatory Sparrow, tied the hack to ongoing military and cyber tensions between Iran and Israel, which intensified following Israeli airstrikes on Tehran\u2019s nuclear sites days earlier. Blockchain security platforms like Chainalysis quickly confirmed that the stolen assets had not been transferred to mixers or exchanges, but rather to irretrievable addresses with inflammatory labels.\u00a0<\/p>\n<p>    <!-- .cn-block-related-link --><\/p>\n<p>Some of the addresses included phrases like \u201cFuckIRGCTerroristsNoBiTEX,\u201d targeting Iran\u2019s Islamic Revolutionary Guard Corps. One Bitcoin wallet used in the attack is provably unspendable due to its invalid checksum. On Ethereum, tokens were sent to the \u201c0x\u2026dead\u201d burn address commonly used to retire supply permanently.<\/p>\n<p>In response, Nobitex issued a fresh statement acknowledging the burn. The exchange said that user assets are safe in cold storage and that the situation is now under control. Nobitex clarified that as a precaution, its staff had also emptied hot wallets. It reiterated that no customer funds would be lost, citing its reserve fund and insurance pool.<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Nobitex Announcement No. 4 \u2013 Regarding the Security Incident<\/p>\n<p>As part of Nobitex\u2019s ongoing response to the recent security incident, we would like to inform our users that the situation is now under control. All external access to our servers has been completely severed.<\/p>\n<p>If you\u2026<\/p>\n<p>\u2014 Nobitex | \u0646\u0648\u0628\u06cc\u062a\u06a9\u0633 (@nobitexmarket) <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/twitter.com\/nobitexmarket\/status\/1935409871257579815?ref_src=twsrc%5Etfw\" target=\"_blank\">June 18, 2025<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>The attackers have also threatened to release the source code and internal infrastructure data of Nobitex, which could worsen the situation for Iran\u2019s leading cryptocurrency platform, which has over 11 million users. Gonjeshke Darande warned that any assets left on the platform would be at risk if users did not withdraw immediately.<\/p>\n<p>Despite having no financial motivation, the hack has far-reaching implications. The intentional destruction of more than $90 million worth of digital currency demonstrates how state-level conflicts have turned crypto infrastructure into a new battlefield.<\/p>\n<p>    <!-- .cn-block-related-link --><\/p><\/div>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>After breaching Iran\u2019s largest crypto exchange, the pro-Israel hacker group Gonjeshke Darande claimed to have destroyed more than $90 million in digital assets taken from Nobitex\u2019s wallets. In a June&hellip;<\/p>\n","protected":false},"author":1,"featured_media":2481,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3331","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency"],"_links":{"self":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/3331","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/comments?post=3331"}],"version-history":[{"count":1,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/3331\/revisions"}],"predecessor-version":[{"id":3332,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/3331\/revisions\/3332"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/media\/2481"}],"wp:attachment":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/media?parent=3331"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/categories?post=3331"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/tags?post=3331"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}