Nobitex Loses $48.6 Million in Cyber Attack by Israeli Hacktivists

Nobitex, a prominent cryptocurrency exchange in Iran, was the target of a cyber breach allegedly carried out by the Israeli hacktivist group Gonjeshke Darande. The attack, which occurred on June 18, 2025, resulted in the theft of approximately $48.6 million. The hackers reportedly targeted hot wallets on the Tron blockchain, which were the most affected by the breach.

Nobitex has assured its users that their assets are secure and that any affected users will be compensated. The exchange stated that user funds are stored in cold storage and that investigations into the incident are ongoing. Screenshots shared by on-chain analyst ZachXBT showed suspicious outflows on Tron, reportedly amounting to $48.65 million.

The hacking incident at Nobitex highlights the increasing cybersecurity threats within the crypto sector, with potential geopolitical ramifications stemming from the ongoing rivalry between Israel and Iran. Gonjeshke Darande, a pro-Israel hacktivist group, is believed to be behind the attack. The group has claimed that the Nobitex exchange is a key tool used by the Iranian regime to finance terror and circumvent sanctions.

The financial impacts of the hack include heightened scrutiny on Tron-based assets, particularly Tether, which is often used for sanctions circumvention. The incident also exposes vulnerabilities in crypto exchanges amid ongoing cyber-hostilities between Israel and Iran. There are potential regulatory implications as well, as such events may lead to tightened security standards globally, highlighting the need for advanced protective measures against similar threats.

The attack further amplifies tensions between Israel and Iran within both cyber and kinetic spheres. This could potentially lead to increased regulatory oversight and changes to security protocols across crypto exchanges. Historical precedents indicate that politically tied platforms within volatile geopolitical contexts remain at risk of such incidents.