Iran’s largest crypto exchange, Nobitex, was hit by a major breach on June 18, resulting in the theft of approximately $48 million, primarily in $USDT via the Tron network.
The pro-Israel hacktivist group Gonjeshke Darande—aka "Predatory Sparrow"—claimed responsibility, saying the attack targeted Nobitex’s hot wallets and threatening to release the exchange’s source code and internal documents within 24 hours.
Blockchain investigator ZachXBT spotted suspicious outflows from wallets with vanity addresses containing anti-Iran messaging, totaling roughly $48.65 million.
In response, Nobitex confirmed the breach, stating that only a portion of its hot wallet infrastructure was affected, while cold wallets remain secure. The exchange has halted operations and promised full compensation via its insurance fund.
