Israel’s $90M Nobitex Exploit Tied to Crypto-Funded Espionage

Iran’s Nobitex exchange suffered a $90 million hack, with TRM Labs suggesting pro-Israel hackers may have siphoned funds and seized sensitive data to uncover Iranian spies paid in cryptocurrency. The incident highlights the growing use of digital assets in state-backed espionage operations.

Days after the breach, three Israeli citizens were arrested for allegedly conducting surveillance, propaganda, and intelligence-gathering tasks on behalf of Iranian intelligence in exchange for crypto payments. TRM Labs noted this as a rare public case of state-sponsored espionage involving digital asset compensation.

One suspect, Dmitri Cohen, reportedly tracked Prime Minister Benjamin Netanyahu’s family members and received thousands in cryptocurrency—about $500 per task—via anonymized blockchain channels. Another individual allegedly photographed military sites and government buildings, further underscoring the operational risks posed by crypto-funded espionage.