A pro-Israel hacking group, Predatory Sparrow, has claimed responsibility for a cyberattack on Nobitex, Iran's largest cryptocurrency exchange. The attack resulted in the draining and effective burning of over $90 million in digital assets. This incident marks a significant escalation in the ongoing cyber warfare between Israel and Iran, targeting financial infrastructure.
Key Takeaways
-
Predatory Sparrow, also known as Gonjeshke Darande, claimed responsibility for the attack.
-
Over $90 million in various cryptocurrencies was stolen and rendered inaccessible.
-
The hackers used politically charged wallet names, indicating a clear political motive.
-
Nobitex confirmed the breach, stating hot wallets were affected, but cold wallets remain secure.
-
The attack is part of a broader cyber conflict between Israel and Iran.
The Cyberattack Details
On Wednesday, June 18, 2025, Nobitex, Iran's leading cryptocurrency exchange, experienced a major security breach. Blockchain investigator ZachXBT first reported the incident, revealing that hackers exploited vulnerabilities in Nobitex's access controls to drain funds from its hot wallets across multiple blockchain networks. The stolen assets included:
-
$49.3 million on Tron
-
$24.3 million on EVM-compatible chains
-
$2 million in Bitcoin
-
$6.7 million in Dogecoin
According to blockchain security firm Cyvers, the breach stemmed from a critical failure in access controls, allowing attackers to infiltrate internal systems. Notably, the stolen funds were sent to inaccessible wallets, effectively "burning" them and making them irrecoverable. This method suggests a political statement rather than financial gain as the primary motive.
Predatory Sparrow's Claim
The pro-Israel hacking group Predatory Sparrow (Gonjeshke Darande) quickly claimed responsibility for the cyberattack via a post on X. The group asserted that Nobitex was a tool for the Iranian regime to finance terrorism and circumvent international sanctions. They further threatened to release the exchange's source code and internal data within 24 hours.
This attack follows a recent cyberattack by Predatory Sparrow on Iran's Bank Sepah, which caused widespread banking disruptions. The group has a history of targeting Iranian infrastructure, including steel mills and gas stations, which they claim support the Iranian regime.
Nobitex's Response and Broader Implications
Nobitex confirmed the unauthorized access to its infrastructure and hot wallets, announcing a suspension of platform access for a security audit. The exchange assured users that most funds held in cold wallets remained safe and pledged to cover losses through its insurance fund and reserves. Nobitex is collaborating with the Iranian Cyber Police (FATA) and other agencies to recover the assets.
This incident highlights the escalating cyber warfare between Israel and Iran, with financial systems becoming a key battleground. Western intelligence agencies have long accused Tehran of using such systems to bypass international sanctions. The Nobitex hack adds to a growing list of crypto security breaches in 2025, with over $2.1 billion in digital assets stolen this year, according to CertiK.
Sources
-
'Pro-Israel Hacker Group' Drains, Burns $90 Million From Iranian Bitcoin Exchange, Decrypt.
-
Hackers steal and destroy millions from Iran's largest crypto exchange, TechCrunch.
-
Iranian Crypto Exchange Hacked, More Than $90 Million Taken, WSJ.
This article was created with support from AI-driven technology, drawing on multiple reputable sources. The final content has been thoroughly reviewed and edited by BlockzHub's editorial team to ensure accuracy, clarity, and coherence. Original reporting sources are credited whenever appropriate and as required. The opinions expressed in this article do not necessarily represent the official views or positions of BlockzHub. This article is intended for informational purposes only and should not be considered financial or professional advice. Investing involves risk, and you should consult a qualified financial advisor before making any investment decisions.