{"id":3221,"date":"2025-06-18T09:17:06","date_gmt":"2025-06-18T09:17:06","guid":{"rendered":"https:\/\/bitunikey.com\/news\/iranian-crypto-exchange-nobitex-suffers-81m-exploit-pro-israel-hacker-group-takes-credit\/"},"modified":"2025-06-18T09:17:08","modified_gmt":"2025-06-18T09:17:08","slug":"iranian-crypto-exchange-nobitex-suffers-81m-exploit-pro-israel-hacker-group-takes-credit","status":"publish","type":"post","link":"https:\/\/bitunikey.com\/news\/iranian-crypto-exchange-nobitex-suffers-81m-exploit-pro-israel-hacker-group-takes-credit\/","title":{"rendered":"Iranian crypto exchange Nobitex suffers $81M exploit, pro-Israel hacker group takes credit"},"content":{"rendered":"

<\/p>\n

\n

Iran\u2019s largest crypto exchange, Nobitex, has confirmed a security breach that resulted in the loss of a significant amount of digital assets, as tensions between Iran and Israel spill over into cyberspace.<\/p>\n

On June 18, Nobitex posted a statement on X acknowledging the incident, stating that unauthorized access had been detected in its hot wallet and reporting infrastructure earlier that morning. The platform promised to use its insurance fund and internal reserves to fully compensate impacted clients and reassured users that cold-stored funds would remain safe.<\/p>\n

\n
\n
\n

\u0627\u0637\u0644\u0627\u0639\u06cc\u0647 \u062f\u0631 \u062e\u0635\u0648\u0635 \u062d\u0627\u062f\u062b\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc<\/p>\n

\u0635\u0628\u062d \u0627\u0645\u0631\u0648\u0632 \u06f2\u06f8 \u062e\u0631\u062f\u0627\u062f\u060c \u062a\u06cc\u0645 \u0641\u0646\u06cc \u0645\u0627 \u0646\u0634\u0627\u0646\u0647\u200c\u0647\u0627\u06cc\u06cc \u0627\u0632 \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u0628\u062e\u0634\u06cc \u0627\u0632 \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u200c\u0647\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u200c\u0631\u0633\u0627\u0646\u06cc \u0648 \u06a9\u06cc\u0641 \u067e\u0648\u0644 \u06af\u0631\u0645 \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0628\u0644\u0627\u0641\u0627\u0635\u0644\u0647 \u067e\u0633 \u0627\u0632 \u062a\u0634\u062e\u06cc\u0635\u060c \u062a\u0645\u0627\u0645 \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627 \u0645\u062a\u0648\u0642\u0641 \u0634\u062f \u0648 \u062a\u06cc\u0645\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u0627\u062e\u0644\u06cc \u0645\u0627 \u062f\u0631 \u062d\u0627\u0644 \u0628\u0631\u0631\u0633\u06cc \u062f\u0642\u06cc\u0642 \u0627\u0628\u0639\u0627\u062f \u0627\u06cc\u0646 \u062d\u0627\u062f\u062b\u0647 \u0647\u0633\u062a\u0646\u062f.<\/p>\n

\u06cc\u0627\u062f\u0622\u0648\u0631\u2026<\/p>\n

\u2014 Nobitex | \u0646\u0648\u0628\u06cc\u062a\u06a9\u0633 (@nobitexmarket) June 18, 2025<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n

While the exchange hasn\u2019t disclosed information regarding the amount lost,\u00a0 blockchain investigator ZachXBT has provided an update<\/a> on Telegram. ZachXBT flagged multiple suspicious outflows involving Bitcoin (BTC), Dogecoin (DOGE), Tron (TRX), and various EVM-compatible chains, estimating the loss to be around $81.7 million.<\/p>\n

Vanity addresses used by the attacker included phrases like \u201cFuckIRGCTerroristsNoBiTEX,\u201d raising immediate suspicions of a politically motivated operation.\u00a0<\/p>\n

<\/p>\n

A pro-Israel hacker group calling itself Gonjeshke Darande, or Predatory Sparrow, has already claimed responsibility for the exploit in a separate X post. The group accused Nobitex of facilitating Iran\u2019s sanctions evasion and financing terrorism and warned that it would release the platform\u2019s internal data and source code within 24 hours.<\/p>\n

\n
\n
\n

After the IRGC\u2019s \u201cBank Sepah\u201d comes the turn of Nobitex
WARNING!<\/p>\n

In 24 hours, we will release Nobitex’s source code and internal information from their internal network.
Any assets that remain there after that point will be at risk!<\/p>\n

The Nobitex exchange is at the heart of the\u2026 pic.twitter.com\/GFyBCPCFIE<\/a><\/p>\n

\u2014 Gonjeshke Darande (@GonjeshkeDarand) June 18, 2025<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n

The hack follows a dramatic spike in Israeli-Iranian hostilities this month. Iranian missile fire retaliated against Israeli airstrikes that targeted military and nuclear facilities throughout Tehran on June 13. Days later, the Nobitex cyberattack seems to reflect those battlefield dynamics, pointing to a well-coordinated digital front in the ongoing war.<\/p>\n

In the past, Gonjeshke Darande has attacked Iranian institutions like fuel distribution networks and Bank Sepah, often coordinating its attacks with geopolitical events.\u00a0 Although Israel has never formally acknowledged ties, analysts believe the group is supported by Israeli cyber units such as Unit 8200.<\/p>\n

Nobitex, a major player in Iran\u2019s cryptocurrency market, has come under fire in recent years for allegedly facilitating transactions with sanctioned entities. Nearly $8 billion in transactions between Nobitex and Binance occurred between 2018 and 2022, according to a report<\/a> by Reuters.<\/p>\n

While the full extent of the damage is still being investigated, the timing and messaging of the attack point to a larger attempt to interrupt Iran\u2019s digital financial infrastructure amid rising regional tensions.<\/p>\n

<\/p><\/div>\n