Who is Gonjeshke Darande? Hackers Behind Iran’s $90M Nobitex Crypto Hack

20 Jun, 2025 Updated 20 Jun, 2025

Former SEO Writer

Expertise : Crypto News & Market Analysis, Content Strategy & SEO Writing

Pooja Khardia is a seasoned crypto content writer with 6+ years of experience in writing, including in blockchain, cryptocurrency, DeFi, and digital finance reporting. In her adventure journey, she is currently working with CoinGape Media and leading their Trending Section. Here, she uses her expertise to deliver analytics, market insights, price predictions, and information on what’s trending in the crypto space, aiming to keep the crypto and web3 community updated with market trends and important insights. Known for a user-centric and straightforward writing style, Pooja is passionate about making crypto easy and accessible. Her writing blends market research with storytelling, helping readers stay ahead in a fast-paced industry. When not behind the keyboard, Pooja embraces her creative side through drawing and crafting. Connect with Pooja on LinkedIn or X.

Read full bio

Why Trust CoinGape

CoinGape has covered the cryptocurrency industry since 2017, aiming to provide informative insights to our readers. Our journal analysts bring years of experience in market analysis and blockchain technology to ensure factual accuracy and balanced reporting. By following our Editorial Policy, our writers verify every source, fact-check each story, rely on reputable sources, and attribute quotes and media correctly. We also follow a rigorous Review Methodology when evaluating exchanges and tools. From emerging blockchain projects and coin launches to industry events and technical developments, we cover all facets of the digital asset space with unwavering commitment to timely, relevant information.

Highlights

Iran’s largest crypto exchange, Nobitex, was hacked by the Gonjeshke Darande hacker group.
The hackers stole $90M and burned all amid the Israel-Iran conflict.
Gonjeshke Darande targets alleged terror financing groups and is linked to Israeli intelligence.

AD Trade Bitcoin, Ethereum and 500+ cryptocurrencies on Bitget - Trade Now

The Israel-Iran conflict intensified and has moved in all directions, not only on the battlefield, as the Gonjeshke Darande hacked Iran’s biggest crypto exchange. This group of hackers has taken credit for the $90M hack. They are not simple hackers but are allegedly connected to Israeli intelligence. Notably, this is not the first time they have done this to Iran, but to their crypto infrastructure, it’s new.

Who is Gonjeshke Darande?

Gonjeshke Darande is a name taken from the Farsi language and stands for Predatory Sparrows. It is a group of hackers, sophisticatedly known for their politically driven actions. It is allegedly believed to be connected with Israeli intelligence. However, this is an allegation, and Israel has not confirmed any association.

The group is known for targeting Iranian infrastructure, including their petrol pumps, steel industry, government system, financial institutions, and others. However, they claim to carefully place these hacks and not impact innocent lives.

These hackers are quite active on social media platforms, carrying nearly 10,000 followers on two X accounts. They actively inform users on their activities, motives, and what’s coming next.

On June 18, they targeted Iran’s biggest crypto exchange, Nobitex, and succeeded with a more than $90M hack amid Israel-Iran conflict. Before this, they also attacked Iran’s largest state-owned banks in May.

Why Gonjeshke Darande Hack the Nobitex Exchange?

According to the group’s official X post, “Nobitex exchange is at the heart of the regime’s efforts to finance terror worldwide.” The hackers claim that the exchange does not even pretend to abide by the sanctions and finances terrorism.

As a result, they hacked the crypto platforms and burned the hacked BTC, ETH, and other cryptos, signaling that the intention is political rather than economic. The last update on the Nobitex crypto hack included revealing the source code of the exchange and other sensitive information.

However, experts believe that it may be just a start, and further cyberattacks may affect Iran’s crypto infrastructure.

Investment disclaimer: The content reflects the author’s personal views and current market conditions. Please conduct your own research before investing in cryptocurrencies, as neither the author nor the publication is responsible for any financial losses.

Ad Disclosure: This site may feature sponsored content and affiliate links. All advertisements are clearly labeled, and ad partners have no influence over our editorial content.

Frequently Asked Questions (FAQs)

1. Who is Gonjeshke Darande?

Gonjeshke Darande is a group of hackers known for politically motivated cyberattacks.

2. Is Nobitex financing terrorism?

The Gonjeshke Darande alleged that the exchange failed to follow the sanctions rules and was involved in terror financing.

3. What’s the latest update on the Israel-Iran conflict?

The cross-firing between the two countries is continuous at press time, and the US has hinted at the possibility of intervening in the war.

Why Trust CoinGape

CoinGape has covered the cryptocurrency industry since 2017, aiming to provide informative insights Read more…to our readers. Our journal analysts bring years of experience in market analysis and blockchain technology to ensure factual accuracy and balanced reporting. By following our Editorial Policy, our writers verify every source, fact-check each story, rely on reputable sources, and attribute quotes and media correctly. We also follow a rigorous Review Methodology when evaluating exchanges and tools. From emerging blockchain projects and coin launches to industry events and technical developments, we cover all facets of the digital asset space with unwavering commitment to timely, relevant information.