One of the largest Iranian cryptocurrency platforms, Nobitex, has fallen victim to a massive hacking attack. Unknown individuals gained unauthorized access to the exchange’s hot wallets and withdrew over $81 million in digital assets.
This is reported by Finway
Details of the Hack and Accountability
Blockchain analyst ZachXBT stated that the attack was executed through two “vanity addresses.” One of them contained a pronounced anti-Iranian message TKFuckiRGCTerroristsNoBiTEX, while the other included a sequence of the letter f and the word Dead, which is often used for token burning.
The hack is attributed to the hacktivist group Gonjeshke Darande, also known as Predatory Sparrow. This team positions itself as pro-Israeli and has previously participated in cyberattacks on Iranian industrial and financial targets, including steel mills, energy infrastructure, and the banking sector.
Threats and Exchange Response
In their statement on the social media platform X (formerly Twitter), Gonjeshke Darande referred to Nobitex as a key tool for circumventing international sanctions and financing the Islamic Revolutionary Guard Corps. The hackers threatened to publish the exchange’s source code and internal documents, as well as warned of risks to user assets that remain on the platform.
After “Bank Sepah” of the Islamic Revolutionary Guard Corps, it is now Nobitex’s turn. Attention! Within 24 hours, we will publish the source code of Nobitex and internal information from their internal network. Any assets remaining there after this will be at risk!
The Nobitex administration stated that the attack only affected hot wallets, and all user losses will be compensated from the exchange’s insurance fund. According to the statement, funds in cold wallets remain untouched, the team is conducting a forensic audit, and has temporarily suspended deposit and withdrawal operations to stabilize the situation.
The incident occurred against the backdrop of escalating military confrontation between Iran and Israel, which has provoked a wave of mutual cyberattacks. According to CertiK, the total losses in the crypto industry in 2025 exceeded $2 billion, with the share of wallet hacks growing faster than cases of attacks through protocol vulnerabilities.
It is worth noting that Curve Finance founder Mikhail Egorov previously emphasized that decentralized projects are increasingly facing a new wave of threats—coordinated attacks from hired hacker groups.