Overview

• The hacking collective Predatory Sparrow said it drained roughly $90 million from Nobitex on June 18 by transferring assets to unusable wallets, effectively destroying the funds.
• Blockchain analysts confirmed the stolen crypto was sent to vanity addresses containing anti-IRGC slogans, signaling a symbolic act rather than an attempt to monetize the haul.
• On June 17 the same group claimed to have erased data at IRGC-linked Bank Sepah, accusing the institution of evading sanctions to fund Iran’s missile and nuclear programs.
• Predatory Sparrow warned it would release Nobitex’s internal data and source code to expose the exchange’s alleged role in terrorism financing and sanctions breaches.
• The cyber strikes have added to service disruptions in Iran, where ATM networks have gone offline and widespread internet slowdowns and DDoS attacks have been reported during ongoing missile exchanges with Israel.