Nobitex, Iran’s largest crypto exchange, was recently hit by a colossal $73 million hack. The breach, one of the biggest in Iran’s crypto history, has sent shockwaves through the digital asset community, raising questions about security and geopolitical motives. A pro-Israel hacker group, Gonjeshke Darande, claimed responsibility, escalating tensions in an already volatile region.
Iran Suffers a $73M Hack
The attackers targeted Nobitex’s hot wallets, which store crypto for quick transactions, across the Tron and Ethereum Virtual Machine (EVM) blockchains. Blockchain investigator ZachXBT first spotted suspicious outflows, tracing funds to a wallet with a provocative address containing “IRGC” and “terrorists,” hinting at a political jab.
The hackers moved funds swiftly over several hours, exploiting the Tron network’s fast transaction speeds to dodge detection. Nobitex confirmed unauthorized access to its infrastructure, which quickly halted operations and suspended its website and app. However, the exchange insists cold wallets, which hold most user funds offline, remain secure.
Nobitex has pledged to cover all losses using its insurance fund and internal reserves, but the exact method of the breach remains unclear, leaving users anxious about the platform’s vulnerabilities.
Iran-Israel Tensions Fuel Cyber Chaos
The hack comes amid heightened conflict between Iran and Israel, with cyberattacks becoming a new battleground. Gonjeshke Darande, believed to be linked to Israeli military intelligence, accused Nobitex of helping Iran bypass sanctions, claiming the exchange supports the regime’s financial and military operations. This follows their recent attack on Iran’s Bank Sepah and disruption of 70% of the country’s gas stations, signaling a pattern of targeting critical infrastructure.
The recent Iran-Israel clash has spilled into the digital realm, with Iran reporting a 700% surge in cyberattacks since Israel’s strikes on its nuclear and military sites began on June 13. Similar hacks include the 2022 Gonjeshke Darande attack on an Iranian steel facility. This has caused physical damage, and the 2025 Coinbase data leak exposed vulnerabilities in user accounts.
As Iran grapples with this digital disaster, its reliance on crypto to evade sanctions faces scrutiny. Nobitex’s promise to reimburse users is seen as a welcome move, but the hack highlights the risks associated with centralized exchanges in a sanctions-heavy economy.
