18.06.2025 08:42
A significant cryptocurrency heist has targeted Nobitex, a prominent Iranian exchange, resulting in the theft of approximately $48.65 million in digital assets. On-chain investigator ZachXBT uncovered the unauthorized transfer of these funds, specifically from the Tron network, prompting the exchange to acknowledge a security breach impacting its hot wallets and reporting systems.
Nobitex, in a subsequent statement, confirmed the compromise while reassuring users that cold storage assets remained unaffected. The exchange vowed full compensation, leveraging both its insurance fund and internal reserves to mitigate the financial impact on its clientele. This swift response aimed to calm anxieties and maintain user confidence despite the substantial loss.
Responsibility for this cyberattack has been claimed by Gonjeshke Darande, a pro-Israel hacker group. Their social media post, featuring a stark warning, accused Nobitex of facilitating Iranian terrorism financing and sanctions evasion, labeling the exchange a critical instrument in the regime's global operations. The group added a chilling threat: the imminent release of Nobitex's source code and internal data within 24 hours, further jeopardizing any remaining assets on the platform. Their statement directly linked employment at Nobitex to military service, highlighting the exchange's perceived importance to the Iranian regime.
This audacious cyberattack occurred amidst heightened Iran-Israel tensions, adding a geopolitical dimension to the financial crime. The timing suggests a deliberate escalation of conflict, mirroring a broader pattern of increased cyber warfare between the two nations.
Further compounding Nobitex's predicament, a March report from blockchain analytics firm TRM Labs had already highlighted the exchange's significant role in facilitating illicit financial flows. The report revealed that Nobitex, along with the now-defunct Garantex, handled over 85% of cryptocurrency inflows to sanctioned entities and jurisdictions in 2024 alone, firmly establishing the exchange’s reputation within the landscape of international sanctions evasion. This pre-existing intelligence underscores the vulnerability and strategic importance of Nobitex as a target for cyberattacks.
