How the $90M Crypto Theft by Gonjeshke Darande Might Impact Iran’s Government

Hack of Iranian Cryptocurrency Exchange Nobitex

On Wednesday, Iran’s cryptocurrency exchange, Nobitex, was hacked, resulting in the loss of approximately $90 million. This incident compounds the woes of an industry already grappling with a $223 million exploitation earlier this month.

However, looking beyond the immediate financial implications, this breach seems to carry a deeper, politically charged message—one that may significantly impact the ongoing conflict in the Middle East.

Politically Motivated Attack

As stated by Tom Robinson, co-founder of Oval, “This looks more like an act of political sabotage rather than a straightforward financial maneuver.” He went on to explain that the hackers used “vanity addresses,” seemingly to convey a message specifically to Nobitex and the Islamic Revolutionary Guard.

Following the hack, the hacker group leaked the source code of the exchange the very next day, leaving other tokens on the platform open to further theft.

The hacker, using the alias Gonjeshke Darande, openly expressed their defiance against economic sanctions on social media, stating, “I won’t pay to bypass sanctions,” alongside a screenshot of a “vanity” wallet holding the stolen funds.

The Iranian administration has faced long-standing sanctions, largely due to international skepticism regarding its human rights practices and nuclear development ambitions. The European Union introduced sanctions in 2011, and they’ve been renewed yearly since then. Meanwhile, U.S. sanctions date back to 1979, following the Iranian revolution.

Israel, for its part, has voiced concerns over Iran’s statements threatening to eliminate the Jewish state and has worried about its nuclear weapon considerations, a claim Iran typically rebuts, asserting the program is peaceful in nature. Recently, the International Atomic Energy Agency (IAEA) flagged potential violations concerning nuclear proliferation commitments.

Interestingly, the hacker’s actions echo increasing fears among U.S. senators, like Elizabeth Warren and Angus King, regarding Iran’s potential use of cryptocurrency to sidestep sanctions, especially as they were brought up during discussions with former President Joe Biden in 2024.

Without Nobitex, Iran—already weakened by extensive oil and financial sanctions—could find it increasingly challenging to manage its finances during a volatile period, which might hinder its capability to strategize and carry out actions against Israel.

The Mystery of the Vanity Wallet

There’s a bit of uncertainty surrounding the vanity wallet used by the hackers. Can they even access the stolen tokens, or are they effectively lost forever?

According to Yehor Rudytsia, a security researcher from Hacken, “It’s unlikely that the attackers have any control over these addresses.” He elaborated that generating a private key that aligns with a specific public address is a task so computationally complex it amounts to a near impossibility.