Iran's largest cryptocurrency exchange, Nobitex, has reportedly been exploited for over $81 million in digital assets. On-chain investigators attribute the breach to a critical failure in access controls. A pro-Israel hacker group, "Gonjeshke Darande," has claimed responsibility, alleging Nobitex's involvement in financing terrorism and sanctions evasion, linking the cyberattack to escalating tensions between Israel and Iran.
Key Takeaways
-
Iranian crypto exchange Nobitex was exploited for over $81 million in digital assets.
-
On-chain investigators identified the use of "vanity addresses" by the attackers.
-
Nobitex confirmed the breach, stating only hot wallets were affected and promising full compensation.
-
A pro-Israel hacker group, "Gonjeshke Darande," claimed responsibility, accusing Nobitex of financing terrorism and sanctions evasion.
-
The hack coincides with heightened military tensions and conflict between Israel and Iran.
Nobitex Suffers Major Breach
On-chain investigator ZachXBT first disclosed the Nobitex exploit, revealing that at least $81.7 million in digital assets were drained across the Tron network and Ethereum Virtual Machine (EVM)-compatible blockchains. Attackers reportedly utilized "vanity addresses," including one explicitly referencing "TerroristsNoBiTEX," to facilitate the suspicious outflows from Nobitex-linked wallets. Nobitex confirmed detecting "unauthorized access" to a portion of its hot wallets, which were immediately suspended. The exchange reassured users that assets held in cold storage remained secure and pledged to compensate all damages through its insurance fund and internal resources. Hakan Unal, senior security operations lead at Cyvers, suggested the exploit stemmed from a "critical failure in access controls," allowing infiltration of internal systems.
Pro-Israel Group Claims Responsibility
A pro-Israel hacker group identifying itself as "Gonjeshke Darande" (Predatory Sparrow) has publicly claimed responsibility for the Nobitex hack. In a post on X, the group accused Nobitex of being central to the Iranian regime's efforts to finance terrorism globally and evade sanctions. They further asserted that working at Nobitex is considered valid military service due to its perceived importance to the regime. The group threatened to release Nobitex's source code and internal files within 24 hours, warning that any remaining assets on the platform would be at risk.
Geopolitical Tensions Escalate
The cyberattack on Nobitex comes amidst a significant escalation of conflict between Israel and Iran. The hack occurred following a period of renewed hostilities, including Israel's largest attack on Iran since the 1980s on June 13, and subsequent strategic missile strikes by both nations. Gonjeshke Darande has a history of targeting Iranian institutions, including fuel distribution networks and Bank Sepah, often aligning their cyber operations with geopolitical events. While Israel has not formally acknowledged ties, analysts widely believe the group is supported by Israeli cyber units, such as Unit 8200. The incident highlights the expanding digital front in the ongoing regional conflict.
Sources
-
Iranian Crypto Exchange Nobitex Exploited for $81M, Cointelegraph.
-
Nobitex hacked for $81M as pro-Israel group claims responsibility — TradingView News, TradingView.
-
Iran's Nobitex exchange hacked for $81M by Israel-linked group, Crypto News.
-
Iranian Crypto Exchange Hacked Amid Israel-Iran War, CoinGape.
This article was created with support from AI-driven technology, drawing on multiple reputable sources. The final content has been thoroughly reviewed and edited by BlockzHub's editorial team to ensure accuracy, clarity, and coherence. Original reporting sources are credited whenever appropriate and as required. The opinions expressed in this article do not necessarily represent the official views or positions of BlockzHub. This article is intended for informational purposes only and should not be considered financial or professional advice. Investing involves risk, and you should consult a qualified financial advisor before making any investment decisions.