In a shocking turn of events, Nobitex, Iran's largest cryptocurrency exchange, has fallen victim to a massive cyberattack, resulting in the loss of over $90 million in digital assets. The breach, which occurred on June 18, 2025, has been linked to a pro-Israeli hacking group known as Predatory Sparrow, who claimed responsibility for the attack amid escalating tensions between Iran and Israel.
According to reports, hackers gained access to critical infrastructure of Nobitex, exploiting vulnerabilities in the platform's hot wallets. On-chain investigators, including ZachXBT, revealed that significant outflows were detected across multiple Tron and EVM wallets, with some estimates suggesting initial thefts as high as $49 million from a single address. The attackers also threatened to leak sensitive user data and source code.
The hacking group Predatory Sparrow stated that Nobitex has been used by the Iranian government to bypass international sanctions and fund illicit operations. In a public message, they claimed the attack was a deliberate move to disrupt Iran's financial systems, marking it as the second cyberattack on the country's financial sector in as many days.
Nobitex confirmed the breach, acknowledging unauthorized access to a portion of its infrastructure. The exchange is currently working to secure its systems and assess the full extent of the damage. Meanwhile, users have been urged to exercise caution and avoid sharing personal information as investigations continue.
This incident has raised serious concerns about the security of cryptocurrency exchanges in geopolitically sensitive regions. Analysts from firms like Elliptic and TRM Labs suggest that such politically motivated cyberattacks could become more frequent, targeting platforms perceived as tools for state agendas.
As tensions between Iran and Israel persist, the Nobitex hack serves as a stark reminder of the intersection between cybersecurity and international politics. The crypto community worldwide is watching closely as authorities and the exchange work to mitigate the fallout from this devastating breach.
Andrew Lee
