Pro-Israeli Hacker Group Releases Nobitex Platform Source Code After Huge Reward Hack
A hacker group called Gonjeshke Darande, also known as Predatory Sparrow, has recently released the entire source code of Nobitex, Iran’s largest cryptocurrency exchange. Within 24 hours of carrying out a complex blockchain attack worth over $100 million, the group exposed the platform’s internal data. The event has shocked the cryptocurrency community in the Middle East and the world.
Source code revealed after $100 million cryptocurrency hack
In a post on social media platform X, the Gonjeshke Darande team confirmed that it had released the source code of Nobitex, including key components such as blockchain scripts, internal privacy configurations, and a list of servers. The announcement said that the remaining assets on the exchange were now completely exposed to the public. This prompted cybersecurity analysts to warn that the operation had disabled much of Nobitex's back-end security, opening the door to further attacks on the remaining funds.
Your time is up – the full source code is linked below.
The remaining assets in Nobitex are now fully exposed.
Previously, the hacker group had coordinated attacks across multiple blockchain networks to cause disruption and demonstrate their infiltration capabilities.
— Gonjeshke Darande (@GonjeshkeDarand) June 19, 2025
The Gonjeshke Darande group’s release of the source code is not only a direct challenge to the Nobitex platform, but also clearly shows a connection to a series of previous cyberattacks. The group has accused Nobitex of assisting the Iranian government in bypassing international sanctions, describing the exchange as “the regime’s favorite sanctions-breaking tool.”
Over $100 Million in Cryptocurrency Destroyed, Not Stolen
On Wednesday, blockchain analytics firms Chainalysis and Elliptic confirmed that an estimated $100 million worth of cryptocurrencies, including Bitcoin, Ethereum, XRP, Dogecoin, Solana, Tron, and Toncoin, were affected in the attack. Andrew Fierman, head of national security analysis at Chainalysis, said the stolen assets were sent to “burner” addresses, which are addresses that cannot be accessed with private keys. Rather than being used for profit, the funds may have been destroyed to send a clear political message.
The analyst also noted that the use of flashy wallet addresses such as “1FuckiRGCTerroristsNoBiTEXXXaAovLX” and “DFuckiRGCTerroristsNoBiTEXXXWLW65t” suggests more symbolic sabotage than financial gain. These addresses are typically generated using brute-force tools, with no private keys available for recovery.
Yehor Rudytsia, a security researcher at Hacken, said the wallet addresses were chosen more for political reasons than for a simple theft. He noted that the vast majority of the tokens—more than 20 different types on EVM-compatible chains—were sent to legitimate, irretrievable “burner” addresses, with the exception of a portion of USDT worth about $55 million that could potentially be reissued by Tether.
Nobitex has responded to the incident, saying no further damage has been caused by the data breach. The exchange expects to restore service within five days, although continued Internet disruptions in Iran may slow the process.
Platform linked to Iranian military and terrorist groups
The hackers have accused Nobitex of having ties to the Islamic Revolutionary Guard Corps (IRGC), a military organization designated as a terrorist group by the United States, the United Kingdom, the EU, and Canada. Data analysis from Elliptic shows that Nobitex has been linked to ransomware operations by groups sanctioned by the United States and has direct or indirect ties to Iran's top leadership, including Ayatollah Khamenei.
The blockchain also provided evidence of transactions between Nobitex wallets and terrorist groups such as Hamas, Palestinian Islamic Jihad, or Yemen's Houthi group. This information further clarified the complex connection between the Iranian cryptocurrency exchange and the country's illegal activities.
Source: https://tintucbitcoin.com/hackers-support-israel-public-source-code-nobitex/
Thank you for reading this article!
Please Like, Comment and Follow TinTucBitcoin to stay updated with the latest news about the cryptocurrency market and not miss any important information!
