In a dramatic escalation of cyber warfare amid rising regional tensions, a pro-Israel hacking group known as Gonjeshke Darande—or Predatory Sparrow—has claimed responsibility for a massive cyberattack on Nobitex, Iran’s largest cryptocurrency exchange. The breach resulted in the theft of over $90 million in digital assets, including Bitcoin, Ethereum, Dogecoin, and other cryptocurrencies.
Details of the Attack
According to blockchain analytics firms, the hackers didn’t just steal the funds—they “burned” them by transferring the assets to inaccessible wallets bearing provocative messages aimed at Iran’s Islamic Revolutionary Guard Corps (IRGC). This suggests the attack was politically motivated, not financially driven.
The group accused Nobitex of facilitating sanctions evasion and terror financing on behalf of the Iranian regime. In a post on X (formerly Twitter), they warned users that any assets left on the platform were at risk and later released what they claimed was the exchange’s full source code.
Nobitex confirmed the breach, stating that only a portion of its hot wallet infrastructure was affected and that user funds in cold storage remained secure. The platform temporarily suspended operations while investigating the incident.
Background on Predatory Sparrow
This cyberattack follows a string of high-profile hacks attributed to Predatory Sparrow, including previous strikes on Iran’s gas stations, steel mills, and state-owned Bank Sepah. While Israeli media have linked the group to Israel’s intelligence apparatus, the Israeli government has not officially acknowledged any connection.
Implications of the Incident
The incident underscores the growing role of cyberwarfare in geopolitical conflicts, especially as nations increasingly rely on digital assets to bypass traditional financial systems. It also raises fresh concerns about the vulnerability of crypto infrastructure in politically volatile regions.
The attack highlights the dual-edged nature of cryptocurrency: while it offers financial freedom and innovation, it also presents new risks in the form of cyberattacks and misuse by state and non-state actors.
