Iranian Crypto Exchange Nobitex Suffers $82 Million Hack: Israeli Group Claims Responsibility

In a stunning cyberattack, Iranian cryptocurrency exchange Nobitex has reported a loss of over $81.7 million in digital assets. Blockchain investigator ZachXBT revealed that the funds, originating from Tron and various Ethereum Virtual Machine (EVM) chains, were siphoned from the exchange’s hot wallets on June 16, 2025.

The heist involved two custom addresses with provocative names: “TKFuckiRGCTerrorists…mNX” and “0xffFFfFFffFF…Dead,” highlighting a potential security lapse in Nobitex’s access controls. Security expert Hakan Unal of Cyvers suggests that the attackers exploited vulnerabilities allowing them to bypass internal security protocols designed to prevent unauthorized wallet access.

Responsibility for the attack was claimed by a pro-Israel hacking group, “Gonjeshke Darande,” on X (formerly Twitter). The group, in a post laced with political rhetoric, labeled Nobitex a tool for “regime financing” and threatened to release the exchange’s source code and internal data within 24 hours. This threat followed increased tensions between Israel and Iran, with recent large-scale military strikes resulting in significant casualties on both sides.

Nobitex has responded by assuring users that the majority of their funds are securely held in cold storage and that they intend to cover all losses from the breach using their insurance fund and internal reserves. However, the threat of leaked data remains a concern for many users, and it remains to be seen if this will impact user confidence and trust.

Interestingly, none of the stolen cryptocurrencies have been moved since the attack. This inaction could indicate a strategic pause by the hackers, or it may represent a calculated attempt to maintain pressure and demonstrate their capacity to strike again.

This incident underscores the critical need for robust security measures within cryptocurrency exchanges. It’s not simply about implementing advanced protocols; equally important are stringent internal controls and thorough employee vetting to prevent insider threats and human error.

The situation is unfolding, and Nobitex users are closely monitoring the exchange’s response and efforts to rebuild trust. The silence on the movement of the stolen funds only adds to the mystery and the uncertainty surrounding the future of this high-profile case.