Pro-Israel Cyber Group Takes Credit for $49M Nobitex Cyberattack in Iran

Iranian cryptocurrency exchange, Nobitex, recently experienced a security breach which resulted in the unauthorized transfer of nearly $48.65 million worth of crypto assets on the Tron network. Nobitex confirmed that a portion of its hot wallets and reporting infrastructure had been compromised and subsequently suspended all access.

Despite assuring users that customer assets held in cold storage were not affected and pledging full compensation, the situation remains severe as the pro-Israel hacker group, Gonjeshke Darande (or “Predatory Sparrow”), has claimed responsibility. The group accuses Nobitex of financing global terror and circumventing international sanctions. This incident coincides with escalating Iran-Israel tensions. Prior to the attack, Nobitex was linked to 85% of crypto inflows to sanctioned entities and jurisdictions, often facilitating cross-border transactions bypassing traditional financial controls.