'Pro-Israel Hacker Group' Drains, Burns $90 Million From Iranian Bitcoin Exchange

Summary

A pro-Israel hacking group, Gonjeshke Darande, breached Iran's largest crypto exchange, Nobitex, stealing over $90 million in digital assets. The attack exploited vulnerabilities in access controls, draining funds from hot wallets across multiple blockchain networks. Stolen assets included $49.3 million on Tron, $24.3 million on EVM-compatible chains, $2 million in Bitcoin, and $6.7 million in Dogecoin. The hackers used vanity wallet addresses, rendering the stolen funds effectively burned and unmovable unless stablecoins are reissued. Nobitex confirmed unauthorized access and suspended platform access for a security audit, stating most user funds are safe in cold wallets. The hack is part of escalating cyber warfare between Israel and Iran, targeting financial systems aiding Tehran in circumventing sanctions. Nobitex is collaborating with Iranian authorities to recover assets and cover losses through its insurance fund. This incident adds to over $2.1 billion in crypto thefts reported in 2025, with wallet breaches causing significant financial damage.