19.06.2025 23:22
An Israeli-linked hacking group, Gonjeshke Darande, has reportedly crippled nearly $90 million in cryptocurrency held by Nobitex, a major Iranian digital asset exchange. This audacious cyberattack, unlike typical heists focused on financial gain, appears designed as a pointed political statement, effectively "burning" the funds rather than stealing them. The incident follows a similar attack on Iran's Bank Sepah just two days prior, escalating tensions between Iran and its adversaries.
Nobitex confirmed a security breach on June 18th, 2025, announcing unauthorized access to its internal systems and a portion of its hot wallet, leading to the temporary shutdown of its website and mobile application. Despite requests for comment, the exchange remains silent, mirroring the lack of response from Gonjeshke Darande regarding the incident. Their Telegram support channel, too, has been unresponsive to queries.
Blockchain analytics firms, TRM Labs and Elliptic, independently verified the movement of approximately $90 million in various cryptocurrencies into wallets controlled by the hackers. Crucially, however, the structure of these wallets indicates the hackers have no practical way to access or use the funds. This suggests the primary goal was not financial enrichment, but rather to deliver a strong political message, with the destroyed funds reportedly carrying messages condemning Iran's Islamic Revolutionary Guard Corps (IRGC).
This unprecedented act of digital sabotage highlights the increasing use of cryptocurrency exchanges as targets in geopolitical conflicts. The method employed—destroying rather than stealing—underscores a calculated strategy aimed at maximum political impact, showcasing the evolving tactics of state-sponsored or affiliated cyber warfare. The silence from both the exchange and the hacking group leaves many questions unanswered, fueling speculation and further highlighting the complex geopolitical landscape.