TRM Labs: Israel or using Nobitex data obtained from hacking incidents to hunt Iranian spies

According to ChainCatcher, The Block reported that the crypto analytics platform TRM Labs stated that Israel recently arrested three individuals suspected of engaging in espionage activities for Iran, two of whom were compensated with cryptocurrency, marking a rare public case involving government agents using digital assets.

TRM noted that on June 18, Iran's largest crypto exchange, Nobitex, suffered a hack resulting in losses exceeding $90 million, with the attackers being the pro-Israel organization Gonjeshke Darande. TRM's analysis indicated that, although there is no direct evidence, Israel may have used internal data obtained from Nobitex during this attack (such as wallet and message records) to identify suspects, a tactic consistent with past Israeli behavior. Chainalysis further pointed out that Nobitex is a key node in Iran's crypto system under sanctions and has had on-chain connections with groups related to the Iranian Revolutionary Guard.