On June 18, a report released by the blockchain data analytics firm Elliptic indicated that the attack on the Iranian cryptocurrency platform Nobitex is closely related to the recent escalation of tensions in the Iranian situation. The pro-Israel hacker group 'Gonjeshke Darande' (Predatory Sparrow) transferred the stolen funds to specific addresses, which are referred to in the industry as 'garbage addresses.' These addresses contain variations of the phrase 'F*ckIRGCterrorists' in their public keys.
Elliptic pointed out that this attack was not aimed at profit. The hackers generated related addresses through 'brute force' attacks—this operation requires massive computational power to obtain key pairs containing specific long texts, which means the hackers are practically unable to possess the corresponding private keys. This act of 'fund destruction' is essentially a political signal directed at Nobitex. Yuxian, the founder of SlowMist, also confirmed that the over $80 million in cryptocurrency stolen from Nobitex has likely been transferred to accounts that are 'black hole addresses,' making the possibility of recovering the funds zero.
