Iran’s top crypto exchange, Nobitex, has started to reopen limited services following a devastating cyberattack that drained around $100 million in digital assets earlier this month.
The attack, believed to be politically motivated, was claimed by pro-Israel hacker group Gonjeshke Darande.
In a cautious return to operations, Nobitex announced that only verified users will initially regain access to their wallets, prioritizing those active in spot markets. The exchange also warned users against sending funds to previously used wallet addresses, which are now inactive due to a system overhaul. Depositing to old addresses may result in permanent asset loss.
Withdrawal functions are expected to be available starting June 30, with other services — including deposits and trading — rolling out later. However, Nobitex hasn’t specified a timeline for full restoration.
The hackers, who openly took responsibility, reportedly burned $90 million in digital assets and leaked the exchange’s source code, stating that their target was chosen for its alleged ties to the Iranian regime and networks under international sanctions.
Blockchain analytics firm Chainalysis underscored Nobitex’s central role in Iran’s digital asset landscape, noting that it has handled over $11 billion in crypto inflows — surpassing the combined volume of the next ten domestic platforms. Their investigation also linked Nobitex to blacklisted entities.
In response to the breach, Iranian regulators have imposed tighter restrictions on the crypto sector, including shorter operating hours for local exchanges.
Meanwhile, cyberattacks from state-backed actors have intensified in 2025. A recent report tied North Korea to nearly 70% of this year’s crypto thefts, including a massive $1.5 billion hack targeting Bybit. Authorities in South Korea have also confirmed that some of these groups are using AI tools like ChatGPT to enhance their targeting and deception tactics.
Source: https://coindoo.com/irans-top-crypto-exchange-struggles-back-after-100m-hack/