I didn't look at Nobitex's source code, nor am I qualified to judge its quality. From what I read here and provided links (just glanced over a few of them) about the exchange's hack and code disclosure, it seems to me that the motivation is to harm their reputation and spread FUD and bad news as much as possible. It's sort of digital warfare on crypto coin playground; do whatever hurts your enemy, the enemy being Iran in this case.
Feel free to correct me if I'm wrong with my assessment (I oppose any kind of war and military violence; sadly humanity doesn't progress much to leave such things behind).
They likely released the source code as an incentive for other hackers to join in and find vulnerabilities, ultimately provoking even more damage to the customers or to the exchange itself.
Sounds plausible to me. A withdrawal run of exchange's customers will likely be pretty harmful to the exchange.
Why are the supposed authorities not making effort to recover those stolen funds? I guess you should know the answer because in times of war, anything goes, just maybe. I'm still struggling to believe that that address is a burner address because to generate a wallet, a private key is needed as part of the process. Therefore I have the strong feeling that the sender have access to the wallet, unless I'm wrong, which I'm allowed to.
Well, most crypto transactions are final and not reversible. How should this happen?
I'm still struggling to believe that that address is a burner address because to generate a wallet, a private key is needed as part of the process.
It took me only seconds to create a public address hat expresses my pacifistic standpoint: 1iDontLikeWarmongeringATALLWynvGa

This valid address is of course at time of this writing empty (no, please don't send dust or donations!!), nobody knows the public key, nobody knows the private key to it, me included. As we neither have enough time or energy in our solar system to find the private key for my invented address, it's a coin burner address, because any UTXO sent to it can't be spent anymore. Simply, don't immobilize UTXOs virtually forever by sending them to burner addresses, even when it makes all our movable coins worth a tiny bit more.
Therefore I have the strong feeling that the sender have access to the wallet, unless I'm wrong, which I'm allowed to.
I'm 100% sure, the sender doesn't have the private key. Saying this with the same confidence where I know, I don't have the private key for 1iDontLikeWarmongeringATALLWynvGa either.
Future generations will definitely be ashamed of us.
I'd like to say that with inscriptions and silly pics, NFT and whatnotelse spam carved into the Bitcoin blockchain forever worse has been done. I don't support any of this crap shit.