TLDR:
$82M stolen across Tron, Ethereum, and Bitcoin networks in the Nobitex breach.
Hackers used politically charged wallet names tied to anti-terror messages.
Predatory Sparrow claimed responsibility, citing Iran sanctions evasion.
Nobitex suspended services and pledged full user fund reimbursement.
A major cyberattack has struck Nobitex, Iran’s largest crypto exchange, compromising nearly $82 million from its hot wallets. The incident, which occurred on June 18, adds to growing concerns over crypto security in high-conflict zones.
Nobitex confirmed the breach early June 19, saying unauthorized access targeted its reporting systems and internet-connected wallets. Although cold storage holdings remain safe, services have been suspended while the team investigates the breach.
The attack comes at a time of elevated Israel-Iran tensions and renewed cyber warfare allegations.
Nobitex Hack Disrupts Crypto Operations in Iran
Nobitex reported the breach through an official update, noting its technical team detected unusual activity within core systems.
Immediate action was taken to halt all access and secure user funds. According to the statement, user assets held in cold wallets were not impacted. However, the breach affected a portion of hot wallet reserves, which are more vulnerable due to internet exposure.
اطلاعیه در خصوص حادثه امنیتی
صبح امروز ۲۸ خرداد، تیم فنی ما نشانه‌هایی از دسترسی غیرمجاز به بخشی از زیرساخت‌های اطلاع‌رسانی و کیف پول گرم را شناسایی کرده است. بلافاصله پس از تشخیص، تمام دسترسی‌ها متوقف شد و تیم‌های امنیتی داخلی ما در حال بررسی دقیق ابعاد این حادثه هستند.
یادآور…
— Nobitex | نوبیتکس (@nobitexmarket) June 18, 2025
The platform assured users that losses would be fully covered using an internal insurance fund and company resources. Until investigations are finalized, Nobitex has taken its website and app offline.
Iranian crypto users now face uncertainty, especially amid a strict ban on exchanges enforced earlier this year. Blockchain security firm Cyvers detected suspicious transactions totaling $82 million from the Nobitex exchange hack. The stolen funds spread across multiple networks, including $49.3 million on Tron and $24.3 million on Ethereum chains.
Hackers used provocative wallet addresses containing anti-terrorism messages while the stolen crypto remains unmoved so far.
Hacker Group Claims Responsibility
A hacker group calling itself Gonjeshke Darande, also known as Predatory Sparrow, claimed responsibility shortly after the breach.
In a post shared on X, the group threatened to release Nobitex’s internal data and source code within 24 hours. They warned users to withdraw funds before further leaks occur.
The group tied the attack to broader claims against Iran’s regime, accusing Nobitex of helping fund terrorism and evade international sanctions. They described the platform as essential to government operations, even alleging that employment there substitutes for mandatory military service.
After the IRGC’s “Bank Sepah” comes the turn of Nobitex
WARNING!
In 24 hours, we will release Nobitex's source code and internal information from their internal network.
Any assets that remain there after that point will be at risk!
The Nobitex exchange is at the heart of the… pic.twitter.com/GFyBCPCFIE
— Gonjeshke Darande (@GonjeshkeDarand) June 18, 2025
While the claims remain unverified, their timing aligns with wider geopolitical cyber tensions.
This incident follows similar attacks on Iran’s financial infrastructure, including a recent strike on Bank Sepah. With crypto playing a larger role in sanctioned economies, platforms like Nobitex face increased targeting. Blockchain researcher ZachXBT traced the transfer, confirming suspicious wallet activity tied to the exchange.
Although no official state actor has been directly linked to the attack, experts view the timing as strategic. The intersection of cybercrime, economic pressure, and regional conflict continues to complicate crypto use in Iran.
For now, Nobitex users await clarity on the extent of the breach and the safety of their funds.
The post Nobitex Hack: $82M Stolen in Major Cyberattack Amid Rising Geopolitical Tensions appeared first on Blockonomi.
