18.06.2025 10:53
Iran's largest cryptocurrency exchange, Nobitex, suffered a significant security breach, resulting in the theft of approximately $81.7 million. The incident, discovered Wednesday, prompted an immediate suspension of all platform access as the exchange's technical teams launched a thorough investigation. Initial reports from on-chain analysts, such as ZachXBT, pointed to compromised hot wallets and suspicious outflows across multiple blockchain networks, including Tron, Bitcoin, Dogecoin, and Ethereum Virtual Machine (EVM)-compatible chains.
Following the discovery of the breach, Nobitex reassured users that their funds held in cold storage remained secure. The exchange acknowledged the incident, accepting full responsibility for the compromised hot wallets and promising full compensation to affected users from its insurance fund and internal resources. While the platform's website and app remain temporarily offline pending a complete security review, Nobitex maintains a commitment to restoring user access and resolving the situation.
A pro-Israel hacking group, identifying themselves as Gonjeshke Darande ("Predatory Sparrow"), claimed responsibility for the attack. They justified their actions, citing allegations of Nobitex's involvement in terrorism financing and sanctions evasion. This group, in a bold move, threatened to publicly release Nobitex's source code and sensitive internal data within 24 hours if their demands were not met. The hackers highlighted Iran's reliance on Nobitex as a key factor motivating their action. The incident underscores the vulnerability of even major cryptocurrency exchanges to sophisticated cyberattacks. This attack, leveraging sophisticated techniques and publicly claiming responsibility, represents a significant escalation in the ongoing cyber warfare between various international actors. Further analysis of the stolen funds' movement across multiple blockchains is crucial to understanding the full scope of the breach and to potentially recover the lost assets.
