cryptohack

Nobitex hacked for $81M by Israel-linked group Predatory Sparrow.
Attack used vanity addresses to drain Tron, EVM wallets.Nobitex vows to compensate users via insurance fund.Hack tied to Israel-Iran tensions, targeting sanctions evasion.Stolen funds unmoved, signaling political motive.
Nobitex Hacked: Massive Crypto Theft Shakes Iran
Iran’s largest cryptocurrency exchange, Nobitex, suffered a security breach, losing over $81 million in digital assets. The attack targeted hot wallets across Tron and Ethereum Virtual Machine (EVM)-compatible blockchains. Unauthorized access drained funds, including Bitcoin, Dogecoin, and Tether’s USDT.
The breach occurred on June 18, 2025, with attackers exploiting vulnerabilities in access controls. Nobitex confirmed the incident, stating that cold storage funds remain secure. The exchange suspended its website and app for a full investigation.
Israel-Linked Hackers Claim Responsibility
The pro-Israel hacking group Gonjeshke Darande, or Predatory Sparrow, claimed responsibility for the attack. They accused Nobitex of facilitating Iran’s sanctions evasion and financing terrorism. The group used vanity addresses, including one labeled “TKFu ckiRGCTerroristsNoBiTEXy2r7mNX,” to transfer stolen funds.
The hackers threatened to release Nobitex’s source code and internal data within 24 hours. They warned users to withdraw assets, claiming any remaining funds could be at risk. The attack follows a similar cyberstrike on Iran’s state-owned Bank Sepah, also attributed to the group.
The stolen funds, valued at over $81 million, remain unmoved in burner addresses. Security experts noted the use of politically charged wallet names, suggesting the hack was a deliberate political statement rather than a financial theft.
Nobitex Vows to Compensate Users
Nobitex accepted full responsibility for the breach and pledged to cover losses through its insurance fund and reserves. The exchange emphasized that only a portion of hot wallet assets was affected. User funds in cold storage are reportedly safe.
The platform is working with Iran’s Cyber Police (FATA) to recover the stolen assets. Nobitex has not disclosed specific details about the attack’s scope or the assets lost. The investigation continues as the exchange aims to restore operations.
The hack adds to a string of crypto breaches in 2025, with over $2.1 billion stolen industry-wide, according to blockchain security firm CertiK. Wallet compromises and key mismanagement remain leading causes of such losses. CertiK Report on 2025 Crypto Hacks
Geopolitical Tensions Fuel Cyber Warfare
The attack coincides with heightened Israel-Iran tensions, marked by missile strikes and cyberattacks. On June 13, Israel launched airstrikes on Iranian targets, prompting retaliatory missile fire. The Nobitex hack reflects a broader digital conflict targeting Iran’s financial infrastructure

Gonjeshke Darande has a history of attacking Iranian systems, including steel mills and gas stations. The group’s actions align with escalating regional conflicts, raising concerns about the security of crypto exchanges in sanctioned nations. The breach has sparked discussions about the role of cryptocurrency in bypassing sanctions. Nobitex, with over 7 million users, has been linked to Iran’s efforts to acquire foreign currencies. The hack could disrupt these operations, dealing a strategic blow to the regime.
Security Flaws Exposed in Hack
The exploit stemmed from failures in Nobitex’s access controls, allowing hackers to infiltrate internal systems. Vanity addresses used in the attack were designed to send a message, with funds transferred to wallets lacking private keys. This suggests the hackers prioritized disruption over profit.
The breach reduced Nobitex’s wallet holdings by over 90%, from $1.8 billion to $96 million, according to blockchain analytics platform Arkham. The exchange faces a credibility crisis as users await updates on asset safety and platform restoration.
Nobitex’s response includes a commitment to enhance security measures. The exchange urged users to remain vigilant amid ongoing investigations. The incident underscores the vulnerabilities of hot wallets and the growing threat of politically motivated cyberattacks in the crypto space.
#Nobitex #CryptoHack #IranIsraelConflict #PredatorySparrow #CyberWarfare

The crypto world was rocked in May 2025 as hackers made off with a staggering $244.1 million across 20 major incidents. 😨 While that number is alarming, it's actually 39% lower than the $400M+ lost in April. Still, May proved that Web3 remains a high-stakes battlefield. ⚔️💰

---

💥 The Cetus Protocol Exploit – $223M Vanishes!

The biggest blow came from the Cetus Protocol, a decentralized exchange (DEX) running on the Sui blockchain. 🚀 Hackers exploited a vulnerability in Cetus’ smart contract overflow checks, draining $223 million in mere moments. 🧨🔓

---

🛡️ The Fightback: $157M Recovered!

But all hope wasn’t lost. Thanks to swift action by Sui validators and the Cetus team, about $157 million of the stolen funds were frozen and clawed back—an impressive 71% recovery rate! 🧊💼

With community support, $162M worth of these recovered assets will be transferred to a multi-signature wallet jointly managed by Cetus, the Sui Foundation, and blockchain security firm OtterSec. 🗳️🔐

This wallet will oversee the safe reimbursement of affected users and help restore Cetus’ operations. 🙌💸

---

🎯 Bounty Offered: Will the Hacker Take It?

In a bid to recover the rest, Cetus has offered the attacker a $6 million white-hat bounty 💰🕵️‍♂️—a common tactic in crypto circles to encourage the safe return of stolen assets. So far, there’s been no response.

---

📉 May in Perspective

Despite the drama, the total amount hacked in May 2025 is significantly less than previous months, a sign that DeFi platforms may be slowly learning from past attacks. 📚✅

---

🔐 Final Thoughts

The Cetus hack is a wake-up call—but also a testament to how fast and united a community can respond. 👥⚡ With tighter security, better audits, and community-driven protocols, the future of DeFi can still be bright. 🌞📈 #CryptoNews #DeFiSecurity #BlockchainUpdates #CryptoHack #SuiNetwork $SUI

Crypto hacks surge over 130% in Q1 2025
Raj Gokal, co-founder of the Solana blockchain, has become the target of a serious cyberattack. Hackers published his personal identification documents on the compromised Instagram account of rapper Migos. The leak appears to be tied to an unsuccessful extortion attempt — reportedly demanding over $4.3 million.

🔐 Extortion Message: “You Should Have Paid the 40 BTC”
Circulating online are photos of Gokal and his wife, alongside their IDs and passports — resembling typical KYC (Know Your Customer) data used on regulated crypto platforms.
The sensitive documents were shared on the official Instagram page of rapper Migos, which was apparently hacked as well. A caption under one of the posts read: “You should have paid the 40 BTC” — a statement that led many to speculate the leak followed a failed ransom attempt.
At current Bitcoin prices, that would equate to a ransom demand of over $4.3 million. Instagram has since removed the post.

🧠 Social Engineering Suspected
Renowned Web3 investigator ZachXBT believes the attack was a result of social engineering — where cybercriminals tricked their way into accessing Gokal’s personal accounts and data.
“Raj’s accounts were likely compromised and used in an extortion attempt. Since he didn’t pay, the attackers trolled him by leaking the data through Migos’ Instagram,” said ZachXBT.

Interestingly, a week before the incident, Gokal had already warned his followers on X that someone was trying to access his email and social media accounts.

📈 Crypto Hacks in 2025: A Dangerous Spike
This attack is just one in a wave of escalating crypto hacks in 2025.
🔹 Q1 2025: According to security firm PeckShield, there were over 60 major hacking incidents, resulting in $1.63 billion in losses — a 131% increase from $706 million in Q1 2024.
🔹 The largest breach targeted Bybit, while Q2 saw the Cetus Protocol on the Sui network lose over $223 million.
🔹 Following the Coinbase data breach confirmed on May 15, reported compensation claims could exceed $400 million — further highlighting that DeFi and centralized platforms remain prime targets.

⚠️ A Call for Caution
With the rising number of cyberattacks, the need for increased vigilance is critical — especially when dealing with unknown links or individuals posing as support staff from crypto exchanges.

#solana , #CryptoHack , #HackerAlert , #CyberSecurity , #CryptoNewss

Stay one step ahead – follow our profile and stay informed about everything important in the world of cryptocurrencies!
Notice:
,,The information and views presented in this article are intended solely for educational purposes and should not be taken as investment advice in any situation. The content of these pages should not be regarded as financial, investment, or any other form of advice. We caution that investing in cryptocurrencies can be risky and may lead to financial losses.“

Nearly 91% of validators on the Sui blockchain have approved a recovery proposal aimed at addressing damages from the recent hack of the decentralized exchange Cetus. The initiative will securely transfer affected funds into a multisig wallet, paving the way for user reimbursements.

✅ Strong Consensus Ends Voting Early
An on-chain vote involving validators and stakers was closed several days ahead of schedule due to overwhelming support. Over 90% of voters backed the protocol update, which allows the transfer of frozen funds into a jointly managed multisig wallet.
Voting power was determined by the amount of stake each participant held. Notably, the Sui Foundation abstained from voting to maintain fairness in the governance process.

🔄 Multisig Wallet: The Key to Restitution
The locked funds will be moved into a multisig wallet governed by three trusted entities: Cetus, the Sui Foundation, and security firm OtterSec. Their role is to safeguard the assets until they can be fairly redistributed to affected users according to the recovery roadmap.

🔧 Cetus Releases Transparent, Audited Recovery Plan
Cetus has revealed its post-hack strategy. Once the protocol update is complete, the following steps will be taken:

🔹 Assess liquidity losses across affected pools

🔹 Carefully convert assets to reduce further market disruption

🔹 Launch a new, security-enhanced CLMM contract

🔹 Deploy a compensation mechanism for liquidity providers
All new contracts will undergo independent auditing before going live. Cetus is also preparing to restart the protocol, which will allow users to access their funds—with some pools potentially restored within days.

🤝 Community-Led Crisis Management
The Cetus recovery process showcases effective decentralized governance in action. The Sui Foundation praised validators and stakeholders for their rapid response and transparent collaboration during the crisis.
“Regardless of your vote, your participation is a step forward toward resolution and a shared future,” said Cetus representatives.

#sui , #Cetus , #CryptoNewss , #SuiNetwork , #CryptoHack

Stay one step ahead – follow our profile and stay informed about everything important in the world of cryptocurrencies!
Notice:
,,The information and views presented in this article are intended solely for educational purposes and should not be taken as investment advice in any situation. The content of these pages should not be regarded as financial, investment, or any other form of advice. We caution that investing in cryptocurrencies can be risky and may lead to financial losses.“