Nobitex outflows jump 700% after U.S.-Israeli strikes

Reports indicate Nobitex outflows surged 700% after US military attack

Outgoing crypto transactions from Nobitex surged roughly 700% within minutes of the first U.S.–israeli strikes on Tehran, according to Elliptic (https://www.elliptic.co/blog/iranian-cryptoasset-outflows-surge-700-percent-following-attacks). The figure reflects on‑chain outflows from the exchange.

The spike aligns with a pattern of defensive withdrawals during geopolitical shocks and follows a year marked by security concerns around the platform. Causality remains difficult to isolate without multi‑source confirmation.

Why this outflow spike matters for Iranian crypto users and markets

For Iranian users, a sudden rise in withdrawals typically signals a rush to self‑custody or offshore venues to mitigate platform risk. This can exacerbate slippage and widen spreads on domestic order books.

Sustained net outflows can impair liquidity for local pairs, complicate price discovery, and delay settlement if networks congest. For markets, concentrated withdrawals may also elevate counterparty and operational risks.

Immediate stress often shows up in withdrawal‑to‑deposit ratios, on‑chain bridge activity, and stablecoin redemption patterns. Elevated ratios can point to persistent confidence shocks rather than transient noise.

Users may stagger withdrawals to avoid reported operating‑hour restrictions and throttle limits, accelerating moves to self‑custody. Exchanges, in turn, may tighten risk controls and raise surveillance on outbound flows.

At the time of this writing, the VIX stood near 21.88, up about 10%, according to Cboe. This backdrop can amplify liquidity sensitivity around local events.

Verification and context from TRM Labs and Chainalysis

Confirmed versus unverified claims on the 700% Nobitex outflows

The 700% figure is sourced to Elliptic’s analysis of on‑chain flows following the strikes. Independent confirmation of that exact magnitude from other providers has not surfaced publicly.

Based on data from TRM Labs (https://www.trmlabs.com/resources/blog/inside-the-nobitex-hack-how-the-iran-israel-conflict-exposed-tehrans-grip-on-its-crypto-services), withdrawals and capital‑flight proxies rose around prior Iran–Israel escalations, including a reported pre‑strike surge exceeding 150% and post‑hack shifts: lower incoming volumes and higher outflows.

Public risk analytics so far stop short of validating a 700% estimate beyond Elliptic’s post‑strike snapshot. The magnitude should be treated as preliminary pending further cross‑checks.

Brief recent context: strikes, Nobitex hack, and capital flight signals

Regional strikes have repeatedly coincided with withdrawal spikes, and a June 2025 security incident at the platform accelerated loss‑of‑confidence dynamics across Iran’s crypto venues. Subsequent activity suggests precautionary repositioning and a tilt toward self‑custody.

Analysts have also pointed to operating‑hour restrictions as a potential tool to manage stress and scrutinize flows. “Such curfews can make it easier to triage incidents and manage capital flight,” said Andrew Fierman, head of national security intelligence at Chainalysis.

FAQ about Nobitex outflows

What do TRM Labs and Chainalysis data show about Nobitex withdrawals around the strikes and the hack?

They indicate heightened withdrawals around geopolitical escalations and post‑hack stress: pre‑strike spikes, reduced incoming volumes, and elevated outflows. The precise 700% figure lacks independent replication.

How much was drained in the Nobitex hack and which chains or assets did funds move through?

Independent investigators estimated roughly $80–100 million was siphoned, with funds moving across Tron and Bitcoin among others, according to ZachXBT.