The hacking group Gonjeshke Darande, also known as Predatory Sparrow, has released the source code of Nobitex, Iran's largest crypto exchange, following a $100 million cyberattack.
Major Hack and Code Leak
The group published data on Nobitex’s internal infrastructure, including blockchain scripts and privacy settings, compromising the security of remaining assets and exposing them to further attacks.
Damage and Symbolic Destruction
Approximately $100 million in crypto assets, including Bitcoin and Ethereum, were affected by the hack. Analysis suggests that the funds were not stolen for profit but destroyed to convey a political message, supported by the use of provocatively named wallet addresses.
Nobitex's Ties to Iranian Military
Hackers claim that Nobitex is linked to the Islamic Revolutionary Guard Corps (IRGC). Previous research indicates the exchange's ties to ransomware operations sanctioned for links to the IRGC and other groups, including Hamas.
The incident with Nobitex highlights the growing dangers in the cryptocurrency space, especially regarding exchanges tied to state or terrorist structures. The security of assets remains at risk.