Pro-Israel Hacker Group Claims Responsibility for $49M Cyberattack on Iran’s Nobitex Exchange

Iran’s leading crypto exchange, Nobitex, has fallen victim to a major cyberattack, resulting in the unauthorized transfer of approximately $48.65 million in digital assets via the Tron network. Following the breach, Nobitex confirmed that parts of its hot wallets and reporting infrastructure were compromised, prompting the immediate suspension of platform access.

While the exchange assured users that cold wallet funds remain secure and promised full compensation for affected users, the breach is drawing global attention. A pro-Israel cyber group, Gonjeshke Darande (also known as “Predatory Sparrow”), has publicly taken credit for the attack. The group accuses Nobitex of funding global terrorism and evading international sanctions.

The incident occurs amid growing Iran-Israel tensions, adding a geopolitical layer to the attack. Reports prior to the breach revealed that Nobitex had been linked to over 85% of crypto flows into sanctioned jurisdictions — often serving as a key channel for cross-border transactions outside the traditional banking system.