Nobitex Hit by Gonjeshke Darande Hack—~$82M Stole

Pro‑Israel hack hits Nobitex, warns source‑code leak

In the digital world where you enjoy the advancement in technology, which helps in knowing and browsing a lot of things.But, at the same time, you often become the victims to various frauds and online hacking quite quickly. 

Similar to the situation a big cyberattack has happened with Iran's largest crypto exchange. It is hacked!

What happened?

Source: X

The tweet made by the anti-Iranian group Gonjeshke Darande strongly indicated their intention to publicly release Nobitex’s source code, posing a serious threat to the exchange’s security and operations. After giving a warning notice, the team hacked the largest crypto exchange- Nobitex.

The stolen funds were traced to a wallet using boastful vanity address: TKFuckiRGCTerroristsNoBiTEXy2r7mNX.

Estimation of funds later updated to approx $82 million , the funds stolen across Dogecoin, Bitcoin and EVM chains from address includes-

"0xffFFfFFffFFffFfFffFFfFfFfFFFFfFfFFFFDead," "1FuckiRGCTerroristsNoBiTEXXXaAovLX," and "DFuckiRGCTerroristsNoBiTEXXXWLW65t."
Hack Acknowledged, Scope Unclear

The largest crypto exchange Nobitex, has confirmed the cyber attack or got hacked from Gonjeshke Darande  in a tweet. 

Source- X handle 

The X post doesn’t show any information regarding the stolen funds. And it is totally unclear what hacking methods the Gonjeshke Darande used to steal the funds. It hacked without leaving footprints.  

There’s been a sharp rise in cyber exchanges coinciding with military activity between Iran and Israel, raising concerns about spillover into broader digital infrastructure.

Will Nobitex Compensate Investors for Their Losses Following the Hack?

With the impending leak of its source code, Iranian crypto exchange is confronting not only significant financial repercussions but also a deep crisis of trust.

In a recent tweet shown above, is assuring the public that they will share the whole breakdown of the incident , clear roadmap for service restoration and detailed instructions on how users will safely regain access to their assets. 

As of now, Iranian Crypto Exchange has so far remained silent on whether it intends to reimburse users affected by the suspicious on-chain movements detected in late 2023.

About Gonjeshke Darande group.

The team call themselves a hacktivist group from Iran, though widely believed to have strong ties to Israel. 

It has been working since 2021, focusing on hack on Iran’s key system and infrastructure .

The team has done many major cyberattacks and hack which gave a huge impact. Some major cyberattacks and hacks by the anti-iranian group as follows-

• Bank Sepah Breach (June 17–18, 2025)

• Gas Station Outage (Dec 2023)

• Iranian Steel Facility Attack (June 27, 2022)

• Railway and Fuel System Hacks (2021)