New Delhi : In a chilling escalation of the ongoing Israel-Iran conflict, an Israeli-linked hacker group known as “Predatory Sparrow” (also called Gonjeshke Darande) has claimed responsibility for a massive cyberattack on Iran’s largest cryptocurrency exchange, Nobitex, stealing over $90 million (approx. ₹800 crore) — only to burn the stolen funds in an apparent political statement.
A Digital Strike Amid Geopolitical Tensions
According to cybersecurity experts and a report by Fortune, this sophisticated cyberattack took place at a time when Iran and Israel are embroiled in direct and proxy confrontations, both militarily and digitally. The hacker group accused Nobitex of facilitating terrorism financing and helping the Iranian regime bypass Western sanctions.
In a post on social media platform X, the hackers stated:
“These cyberattacks were carried out because Nobitex has become a key regime tool for funding terrorism and violating sanctions.”
Political Message, Not Financial Gain
In a dramatic move, the hackers did not keep any of the stolen crypto assets. Instead, they burned the digital currencies — a term used to describe the act of sending crypto to unusable blockchain addresses, effectively rendering them permanently inaccessible. These addresses were laced with political messages like “F-iRGCTerrorists”, referencing the Islamic Revolutionary Guard Corps (IRGC), a powerful branch of Iran’s military.
Nobitex Responds
Following the attack, Nobitex confirmed the breach on its X account, stating:
“Most user assets remain safe in cold wallets and are unaffected by the hack.”
Despite reassurances, experts believe the damage has been done — both financially and symbolically.
Blockchain Forensics Reveal Wider Links
Leading blockchain security firm Elliptic stated that more than 100 different types of cryptocurrencies were targeted, including Bitcoin, Ethereum, and Dogecoin. The firm also alleged ties between Nobitex and relatives of Iran’s Supreme Leader Ayatollah Khamenei, and further claimed that the platform was used by sanctioned members of the IRGC.
A Cyber Operation of Unprecedented Scale
Arda Akartuna, Elliptic’s Lead Crypto Threat Researcher, said:
“The symbolic use of wallet addresses with specific political phrases required tremendous computing power. This was not about financial gain — it was a powerful geopolitical message.”
Global Implications
Andrew Fierman, Head of National Security at Chainalysis, noted:
“Iran’s crypto sector may be small in size, but this cyberattack has significant implications for both cybersecurity and geopolitics.”
The attack has reignited concerns about state-linked cyberwarfare and the weaponization of blockchain technology. While traditional warfare rages on, the digital front has become equally consequential, with financial systems now squarely in the crosshairs.
As global tensions rise, this symbolic cyberstrike serves as a reminder of how modern conflicts are no longer limited to physical borders — but have now expanded deep into the digital realm.
