A hacker group affiliated with Israel claimed to have attacked Iran's largest cryptocurrency exchange – Nobitex, stealing over 90 million USD in digital assets.
The incident was revealed by blockchain investigator ZachXBT, who stated that the hackers used a provocatively named wallet on the Tron network 'TKFuckiRGCTerroristsNoBiTEXy2r7mNX' and warned that they would continue to target financial institutions related to the Iranian government.
According to Cyvers, the hackers stole a total of over 90 million USD, including 49.3 million USD on the Tron network, 24.3 million USD on EVM chains, 2 million USD in Bitcoin, and 6.7 million USD in Dogecoin.
According to Cyvers, the Nobitex attack stemmed from a serious access control vulnerability, allowing hackers to withdraw funds from hot wallets across multiple blockchains.
However, the stolen funds have not yet been moved. ZachXBT stated that most of the assets have been 'permanently burned' and can only be recovered if stablecoin issuing organizations intervene.
The hacker group Gonjeshke Darande, also known as Predatory Sparrow, claimed responsibility for the attack in a tweet on Wednesday.
The hacker group accused Nobitex of being a tool for financing terrorism and evading sanctions for the Iranian government, while threatening to publish source code and internal data within 24 hours.
The attack marks a new escalation in the cyber war between Israel and Iran, targeting the financial system suspected of helping Tehran evade international sanctions.
Nobitex confirmed that there was unauthorized access to some parts of their infrastructure, affecting the internal communication system and part of the hot wallet.
The exchange has temporarily suspended the platform to conduct a security review, while asserting that the majority of users' assets remain safe in cold wallets.
