TRM Labs: Israel may use the Nobitex data obtained from the hacker incident to hunt down Iranian spies.

According to ChainCatcher news and reported by The Block, the encryption analysis platform TRM Labs stated that Israel recently arrested three individuals suspected of engaging in espionage activities for Iran, two of whom were compensated with Crypto Assets, marking a rare public case involving government agents using digital assets. TRM reported that on June 18, Iran's largest crypto exchange Nobitex suffered a hack resulting in losses exceeding $90 million, with the attackers being the pro-Israel group Gonjeshke Darande. TRM's analysis states that while there is no direct evidence, Israel may have used internal data from Nobitex obtained during the attack (such as wallet and message records) to identify suspects, a tactic consistent with Israel's past behavior. Chainalysis added that Nobitex is a key node in Iran's crypto system under sanctions and has had on-chain interactions with groups related to the Iranian Revolutionary Guard.