BlockBeats reported on June 18 that SlowMist founder Cosine stated that the pro-Israel hacker group "Gonjeshke Darande" (Predatory Sparrow) targeted the Iranian crypto platform Nobitex with political motives that outweigh the actual theft of over $83 million in assets. Currently, a significant portion of the stolen funds remains idle and has not been further transferred.
Additionally, according to on-chain investigator ZachXBT, the hackers used customized addresses (vanity addresses) during the attack. All four addresses used in the attack are "vanity addresses," as detailed below:
TRON address: TKFuckiRGCTerroristsNoBiTEXy2r7mNX
EVM address: 0xffFFfFFffFFffFfFffFFfFfFfFFFFfFfFFFFDead
Bitcoin address: 1FuckiRGCTerroristsNoBiTEXXXaAovLX
DOGE Chain address: DFuckiRGCTerroristsNoBiTEXXXWLW65t