On June 18, 2025, Iran's largest cryptocurrency exchange, Nobitex, suffered a major cyberattack resulting in the loss of over $90 million in digital assets.
Details of the Cyberattack
The attack on Nobitex occurred on June 18, 2025, leading to the loss of assets including Bitcoin, Ethereum, Dogecoin, and various altcoins. The attackers used 'vanity addresses' containing anti-IRGC messages, indicating a politically motivated crime.
Activity of Predatory Sparrow
The hacktivist group Gonjeshke Darande, also known as Predatory Sparrow, claimed responsibility for the cyberattack. The group is reported to have possible ties with Israeli intelligence. Following the attack, Predatory Sparrow threatened to publish Nobitex's source code.
Consequences for Nobitex and Digital Warfare
After the incident, Nobitex temporarily took its website and app offline, confirming unauthorized access. Analysts note that this attack is part of a broader escalation of digital warfare between Israel and Iran, where financial infrastructure is becoming a target of cyberattacks.
The cyberattack on Nobitex highlights the increasing threat of cyber warfare amid geopolitical tensions, which can have serious implications for financial systems.