Israeli hackers Gonjeshke Darande claim $81 M Nobitex hack, targeting Iran’s crypto exchange for alleged sanctions evasion and terror financing.
Nobitex, the largest Iranian crypto exchange, has been the victim of a substantial hack in the context of the intensified tensions surrounding the Israel-Iran conflict. The digital assets were compromised, resulting in a more than $81 million loss. The theft is purportedly the responsibility of Gonjeshke Darande, a group purported to have connections to Israel.
Iranian Exchange Experiences $81M Cryptocurrency Hack
The crypto exchange Nobitex disclosed earlier today that it had identified illicit access to a portion of its reporting infrastructure and hot wallet. As indicated in the X post, the platform promptly suspended access and reassured users that their assets were secure. The statement made by Nobitex is translated as,
Immediately upon detection, all access was suspended and our internal security teams are closely investigating the extent of the incident. We would like to remind you that users’ assets are completely secure according to cold storage standards, and the above incident only affected a portion of the assets in hot wallets. However, the platform hasn’t publicly revealed specifics about the stolen assets or the alleged perpetrators.
ZachXBT, a crypto sleuth, later disclosed additional information regarding the breach in a Telegram post. ZachXBT claimed that the Iranian exchange suffered a minimum loss of $81 million in digital assets. The investigator determined that users of the Tron network and EVM-compatible blockchains have lost the funds even though only a portion of the loss has been confirmed.

According to reports, the assailants exploited the protocol by employing a “vanity address,” which resulted in suspicious outflows from numerous wallets associated with Nobitex. The perpetrators used the initial address to steal $49 million.
- TKFuckiRGCTerroristsNoBiTEXy2r7mNX
- 0xffFFfFFffFFffFfFffFFfFfFfFFFFfFfFFFFDead
Are Israeli hackers responsible for the Nobitex hack?
The crypto hack has been attributed to Predatory Sparrow, or Gonjeshke Darande, a hacker group with purported pro-Israel affiliations. “We, Gonjeshke Darande, conducted cyberattacks against Nobitex,” they wrote on their X account.

It is important to note that the hackers claimed that Nobitex was an essential component of the Iranian government’s financial and military operations and that it assisted the regime in circumventing sanctions. Despite Iran’s efforts to alleviate tensions with Israel, this unforeseen crypto hack has occurred. The hackers threatened to disclose Nobitex’s internal source code and data within 24 hours, cautioning users that any assets remaining on the platform after that date would be susceptible to attack. Additionally, they stated,
These cyberattacks are the result of Nobitex being a key regime tool for financing terrorism and violating sanctions. Associating with regime terror financing and sanction violation infrastructure puts your assets at risk. Take action before it’s too late
US President Donald Trump denied mediating the Israel-Iran confrontation, contrary to previous reports. He stated, “I have not attempted to engage in ‘Peace Talks’ with Iran in any capacity.” This is yet another example of FAKE NEWS that has been HIGHLY FAKED. If they wish to communicate, they are aware of my contact information.