Iran's crypto exchange Nobitex confirmed that its system experienced a hacking incident, resulting in significant losses of user assets. The exchange immediately suspended operations and began an internal investigation.
Detection of the Breach
Nobitex reports that its technical team detected unauthorized access to a portion of its infrastructure and hot wallet. Following the discovery, access was suspended, and the company is conducting a thorough internal investigation to assess the extent of the incident.
Responsible Parties
According to crypto analyst ZachXBT, the exchange was exploited for $81.7 million on the Tron network and other EVM-compatible blockchains. The hacker group Gonjeshke Darande, also known as 'Predatory Sparrow,' claimed responsibility for the attack, stating it was in retaliation for Nobitex’s alleged role in terrorism financing and sanctions evasion. The group further threatened to release the exchange's source code and internal data within 24 hours.
Impact on the Crypto Industry
This incident is part of a growing list of hacks within the crypto industry. CertiK reported that over $2.1 billion in digital assets were exploited in 2025, mainly due to wallet compromises and key mismanagement. Ronghui Gu, co-founder of CertiK, noted that most thefts are due to social engineering scams rather than protocol-level breaches.
The attack on Nobitex highlights the need for enhanced security within the crypto industry. Given the significance of crypto exchanges for users, it is crucial to continue developing protection mechanisms and informing clients about potential risks.
