Nobitex Loses $82 Million in Cyberattack Amid Geopolitical Tensions

Nobitex, Iran’s largest crypto exchange, has fallen victim to a significant cyberattack, resulting in the theft of nearly $82 million from its hot wallets. The breach, which occurred on June 18, has raised serious concerns about the security of cryptocurrency exchanges in regions with high geopolitical tensions.

Nobitex confirmed the breach early on June 19, stating that unauthorized access targeted its reporting systems and internet-connected wallets. While cold storage holdings remain secure, the exchange has suspended its services to investigate the incident thoroughly. The attack coincides with heightened tensions between Israel and Iran, as well as renewed allegations of cyber warfare.

The platform assured users that all losses would be fully covered using an internal insurance fund and company resources. Until the investigations are complete, Nobitex has taken its website and app offline, leaving users in a state of uncertainty, especially given the strict ban on exchanges enforced earlier this year.

Blockchain security firm Cyvers detected suspicious transactions totaling $82 million from the Nobitex exchange hack. The stolen funds were distributed across multiple networks, including $49.3 million on the Tron network and $24.3 million on the Ethereum network. Hackers used provocative wallet addresses containing anti-terrorism messages, although the stolen crypto remains unmoved so far.

A hacker group calling itself Gonjeshke Darande, also known as Predatory Sparrow, claimed responsibility for the attack shortly after it occurred. In a post shared on X, the group threatened to release Nobitex’s internal data and source code within 24 hours, warning users to withdraw their funds before further leaks occur. The group tied the attack to broader claims against Iran’s regime, accusing Nobitex of helping fund terrorism and evade international sanctions. They described the platform as essential to government operations, even alleging that employment there substitutes for mandatory military service.

While the claims remain unverified, their timing aligns with wider geopolitical cyber tensions. This incident follows similar attacks on Iran’s financial infrastructure, including a recent strike on Bank Sepah. With cryptocurrency playing a larger role in sanctioned economies, platforms like Nobitex face increased targeting. Blockchain researcher ZachXBT traced the transfer, confirming suspicious wallet activity tied to the exchange.

Although no official state actor has been directly linked to the attack, experts view the timing as strategic. The intersection of cybercrime, economic pressure, and regional conflict continues to complicate the use of cryptocurrency in Iran. For now, Nobitex users await clarity on the extent of the breach and the safety of their funds.