Iran’s Nobitex Source Code Exposed Day After Hackers Steal Tokens Across Bitcoin, EVM, Ripple Networks
Amidst escalating tensions between Israel and Iran, a significant cyberattack has unfolded, raising serious concerns about the security of Iranian cryptocurrency exchange, Nobitex. The pro-Israel hacking collective, Gonjeshke Darande (Predatory Sparrow in Farsi), claimed responsibility for a $100 million exploit targeting multiple blockchains, followed by the release of Nobitex’s complete source code.
This audacious move occurred just days after Israel launched military strikes against Iranian nuclear and military sites, citing the need to prevent Iran from acquiring nuclear weapons. Iran retaliated with ballistic missile attacks across Israel.
Gonjeshke Darande, in an X post, declared the release of Nobitex’s source code, rendering user assets vulnerable. The leaked data included blockchain scripts, internal privacy settings, and server lists, effectively crippling the exchange’s security infrastructure. The group accused Nobitex of aiding Iran in circumventing international sanctions, labeling it the “regime’s favorite sanctions violation tool.”
The $100 million exploit involved the transfer of funds from Bitcoin, Ethereum Virtual Machine (EVM) compatible tokens, Ripple, Dogecoin, Solana, and other networks. These funds were deliberately sent to burner addresses with provocative names like “1FuckiRGCTerroristsNoBiTEXXXaAovLX,” making recovery highly improbable. The use of brute-force-generated vanity addresses suggests the attackers may not even possess the private keys to these wallets.
Nobitex responded to the incident, asserting that no further losses occurred after the source code leak and outlining plans to restore services within five days. However, ongoing internet disruptions in Iran could hinder recovery efforts.
The incident highlights the escalating cyber warfare between Israel and Iran, and underscores the vulnerability of cryptocurrency exchanges to sophisticated attacks, particularly in politically volatile regions. The release of the source code presents a significant risk to Nobitex users who haven’t yet withdrawn their funds, leaving them exposed to potential further exploitation. The situation underscores the need for robust security measures within the cryptocurrency industry, especially in regions facing geopolitical instability.
