Nobitex, Iran’s largest cryptocurrency exchange, has confirmed a major hack resulting in over $48 million in stolen assets, primarily in Tether (USDT) on the Tron network.
The exchange disclosed the breach in a statement posted on X on June 18.
Hot Wallet Breach Prompts Investigation
According to Nobitex, the breach targeted its hot wallets and parts of its reporting infrastructure. The company said it immediately suspended all access and launched an internal investigation.
“All damages will be compensated through the insurance fund and Nobitex resources,” the exchange assured users.
While hot wallets were compromised, Nobitex emphasized that cold wallet funds remain secure. The platform also took its website and mobile app offline while the investigation continues.
“Predatory Sparrow” Claims the Attack
A group calling itself Gonjeshke Darande, or “Predatory Sparrow,” claimed responsibility for the attack, labeling Nobitex as a key financial tool for the Iranian regime. The group accused the platform of aiding Iran’s military and facilitating sanctions evasion.
In a statement posted to X, the group warned:
“We conducted cyberattacks against Nobitex. It is at the heart of the regime’s efforts to finance terror worldwide.”
The group also claimed that Nobitex employment constitutes military service, implying the exchange is embedded within Iran’s defense and intelligence ecosystem.
Threat to Leak Data
Predatory Sparrow threatened to release Nobitex’s source code and internal documents within 24 hours, warning users that assets left on the exchange could be in jeopardy.
While no formal links to the Israeli government have been confirmed, media outlets like Reuters and the Times of Israel have previously described the group as “Israel-linked” due to its history of attacking Iranian infrastructure.
The situation marks one of the largest crypto breaches in the Middle East this year, raising serious concerns about cyberwarfare’s growing intersection with the global crypto economy.
Kosta Gushterov
Reporter at Coindoo
Kosta has been a part of the team since 2021 and has solidified his position with a thirst for knowledge, incredible dedication to his work and a “detective-like” mindset. He not only covers a wide range of trending topics, he also creates reviews, PR articles and educational content. His work has also been referenced by other news outlets.
Source: https://coindoo.com/iranian-crypto-exchange-hacked-for-48m-israel-linked-group-claims-responsibility/