Can somebody 'splain to a poor old ignorant but skeptical chemist how long it'd take to generate an address like that, and what kind of hardware could do that? Also, I skimmed through the thread and didn't do a thorough reading of it, but why are these coins considered burned?
This is not a real vanity address where the private key is know, because we don't have enough energy and time in this solar system to find a private key that gives you such a public address.
Therefore you can call it a burner address like e.g. 1BitcoinEaterAddressDontSendf59kuE
You can generate such fake vanity addresses almost instantly, correct length as required by legacy address format, and then just compute the checksum of the address which is usually the last 6 characters of a legacy address. I'm sure there are tools to do it. No electrons were harmed to try to compute an appropriate private key...
I didn't know about this hacked Iranian exchange. I think, it's likely that some state actors might be involved here, when it proves that stolen coins were "burned" for this "statement" address. Who else than state sponsored hackers would waste such an amount of stolen coins, unless there are some filthy rich anti-IRGC sponsors involved, too.