Shortly after the exploit became public, Gonjeshke Darande claimed responsibility for the attack, saying that Nobitex is a "key regime tool" for financing terrorism and violating sanctions.