Cancel Preloader
Please enter CoinGecko Free Api Key to get this plugin works.

Iranian Crypto Exchange Nobitex Hacked for Nearly $82M by Suspected Israeli Group

 Iranian Crypto Exchange Nobitex Hacked for Nearly $82M by Suspected Israeli Group

Markets

Share this article

By Shaurya Malwa|Edited by Parikshit Mishra

Updated Jun 18, 2025, 8:35 a.m. Published Jun 18, 2025, 8:01 a.m.

Hacker working on two laptops (Azamat E/Unsplash)
  • Iranian crypto exchange Nobitex was hacked for nearly $82 million, with the Israeli-linked group Gonjeshke Darande claiming responsibility.
  • The hacktivist group warned that Nobitex’s internal data and source code would be released, putting remaining assets at risk.
  • Nobitex confirmed the attack but did not verify the stolen funds, as tensions between Iran and Israel continue to escalate.

Iranian crypto exchange Nobitex has been hacked for nearly $82 million by Israel-linked hacking activist group Gonjeshke Darande.

The group said in an X post: “After Bank Sepah, it was Nobitex’s turn,” referencing their Tuesday cyberattack on Iran’s state-owned lender. They warned that Nobitex’s internal data and source code would be released within a day, and any assets left on the exchange would be “at risk.”

STORY CONTINUES BELOW

Don’t miss another story.Subscribe to the Crypto Daybook Americas Newsletter today.See all newslettersBy signing up, you will receive emails about CoinDesk products and you agree to ourterms of useandprivacy policy.

On-chain sleuth ZachXBT flagged suspicious outflows totaling $81.7 million in Tron’s TRX

TRX$0.27348

, bitcoin

BTC$104,910.57

, dogecoin

DOGE$0.17049

and other tokens in his Telegram channel on Wednesday.

The stolen funds were traced to a wallet using a provocative vanity address: TKFuckiRGCTerroristsNoBiTEXy2r7mNX.

Estimates of funds stolen was later updated to over $82 million, with funds stolen across Bitcoin, Dogecoin and EVM chains from addresses including
“0xffFFfFFffFFffFfFffFFfFfFfFFFFfFfFFFFDead,” “1FuckiRGCTerroristsNoBiTEXXXaAovLX,” and “DFuckiRGCTerroristsNoBiTEXXXWLW65t.”

The group called Nobitex a “core part of the regime’s terror financing network,” accusing it of helping Iran evade international sanctions by enabling crypto-based payments.

Nobitex, Iran’s largest exchange, confirmed the attack in an X post but did not mention or confirm stolen funds.

At the time of writing, it is unclear what attack method was used by Gonjeshke Darande to conduct the exploit.

The hack comes amid a flurry of cyber and physical attacks between Iran and Israel.

Gonjeshke Darande, believed by cybersecurity analysts to have ties to Israeli intelligence, has previously claimed responsibility for coordinated infrastructure attacks on Iranian steel factories and gas stations.

With the source code leak looming, Nobitex now faces not only financial loss but a full-blown credibility crisis — and users who haven’t yet moved funds may stand to lose everything, per the hacking group’s followup threats.

UPDATE (Jun. 18, 08:34 UTC): Updates headline and text with new information.

Shaurya is the Co-Leader of the CoinDesk tokens and data team in Asia with a focus on crypto derivatives, DeFi, market microstructure, and protocol analysis.

Shaurya holds over $1,000 in BTC, ETH, SOL, AVAX, SUSHI, CRV, NEAR, YFI, YFII, SHIB, DOGE, USDT, USDC, BNB, MANA, MLN, LINK, XMR, ALGO, VET, CAKE, AAVE, COMP, ROOK, TRX, SNX, RUNE, FTM, ZIL, KSM, ENJ, CKB, JOE, GHST, PERP, BTRFLY, OHM, BANANA, ROME, BURGER, SPIRIT, and ORCA.

He provides over $1,000 to liquidity pools on Compound, Curve, SushiSwap, PancakeSwap, BurgerSwap, Orca, AnySwap, SpiritSwap, Rook Protocol, Yearn Finance, Synthetix, Harvest, Redacted Cartel, OlympusDAO, Rome, Trader Joe, and SUN.

Shaurya Malwa

  

Shaurya Malwa

https://4second.com

Related post

Leave a Reply

Your email address will not be published. Required fields are marked *

Please enter CoinGecko Free Api Key to get this plugin works.