18.06.2025 07:52

A significant cyberattack targeted Nobitex, Iran's leading cryptocurrency exchange, resulting in substantial financial losses and raising serious concerns about data security. Blockchain investigator ZachXBT estimates the breach cost over $48 million, impacting the exchange's hot wallet and reporting infrastructure.

Responsibility for the attack was claimed by Gonjeshke Darande, also known as Predatory Sparrow, a pro-Israel hacktivist group. They accused Nobitex of facilitating sanctions evasion for the Iranian government, alleging its use within Iran's financial and military systems. This assertion significantly elevates the incident beyond a simple financial crime, framing it as a politically motivated cyberattack.

Predatory Sparrow issued a stark warning via Twitter, threatening to publicly release Nobitex's source code and internal data within 24 hours. They explicitly cautioned users that any remaining assets on the platform after this timeframe would be vulnerable. This bold move highlights the severity of the breach and the potential for further exploitation.

Nobitex acknowledged a "security issue" in a statement on X (formerly Twitter), confirming unauthorized access to parts of its reporting infrastructure and hot wallet. While the exchange launched an internal investigation and suspended access, they have yet to directly address Predatory Sparrow's claims or quantify the extent of the data compromise. They did, however, reassure users that the majority of assets, held in cold storage, remain secure. This statement underscores the crucial difference between hot and cold storage methods in cryptocurrency security. The incident serves as a stark reminder of the vulnerabilities inherent in even the largest cryptocurrency exchanges, particularly in politically charged environments. The subsequent fallout and the potential for further data leaks remain significant concerns.