18.06.2025 08:44
A significant security breach at Nobitex, Iran's leading cryptocurrency exchange, resulted in the theft of approximately $48.65 million worth of USDT on the Tron blockchain. On-chain cryptocurrency investigator ZachXBT first detected suspicious activity involving multiple wallets linked to the exchange, revealing a complex and efficient operation to move the stolen funds into untraceable Tron addresses.
Following the discovery of this substantial loss, Nobitex officially acknowledged the compromise of its hot wallets and parts of its notification system on June 18th. This prompted an immediate suspension of all services to mitigate further damage. While reassuring users that the majority of funds, held in cold storage, remained secure, the exchange refrained from publicly specifying the exact amount stolen. Nevertheless, Nobitex assumed full responsibility and promised complete compensation to affected users, leveraging its insurance fund and internal resources.
Adding another layer of complexity to this incident, geopolitical tensions between Iran and Israel emerged as a contributing factor. A prominent Israeli-linked hacking group, known as Gonjeshke Darande (Predatory Sparrow), claimed responsibility for the attack in a statement released on June 18th. This group, known for its history of targeting Iranian entities, threatened to publish Nobitex's source code and internal data within 24 hours. Their message strongly suggested a motive rooted in accusations that Nobitex aided the Iranian regime.
The Predatory Sparrow's actions, combined with the scale of the financial loss, raise serious concerns about the intersection of cybersecurity, geopolitical conflict, and the cryptocurrency industry. The incident highlights the vulnerability of even major exchanges to sophisticated, state-sponsored attacks and underscores the ongoing need for robust security measures within the digital asset ecosystem. The future implications for both Nobitex and the Iranian cryptocurrency market remain uncertain in the wake of this significant breach.
