Crypto hacker attack in Iran: Pro-Israeli hacker chop Nobitex

The most important thing shortly

• A hacker attack on Iran's largest crypto exchange Nobitex has paralyzed over $ 90 million.
• The attackers asserted political motives and irrevocably burned the stolen assets.
• The attack is part of a larger cyber conflict between Israel and Iran.

A very kind of cyber war shakes the crypto world of Iran: overnight the largest Iranian crypto tours Nobitex were withdrawn more than $ 90 million-not by ordinary criminals, but by a hacker collective with a political mission. The attackers not only stolen the money, but also probably destroyed it forever. What is behind this spectacular act that goes far beyond digital robbery?

An unprecedented attack shook Iran's crypto sector

A pro-Israeli Hacker collective has hit Ian's leading crypto stock exchange Nobitex. In the attack, cryptos worth over 90 million dollars were stolen. The hackers made no secret of their political motivation and described Nobitex as the Iranian regime's tools for terrorist financing.

After the first analyzes, the perpetrators used weaknesses in access control. According to Cyvers, a blockchain security company, the hackers were able to gain access to the so-called “hot wallets”. These wallets are accessible online and are therefore more susceptible to attacks. The attack affected several networks, including TronBitcoin, Dogecoin and Ethereum-based chains.

According to @zachxbtthe pro-Israel hacker group Gonjeshke Darande attacked the Iranian crypto exchange #Nobitex and stole $82M in assets.

Including
55m $ USDT,
39.41M $DOGE ($ 6.72M)
255.65 B $PEPE ($2.61M)
18.47 $BTC ($ 1.94M)
…

Source:https://t.co/efpjFCKytI

Attacker… pic.twitter.com/y21WIuf9kG

— Lookonchain (@lookonchain) June 18, 2025

The perpetrators show themselves – and want more

The hacker group is called “Predatory Sparrow” – in Persian “Gonjeshke on it”. The group is known for targeted attacks on Iranian infrastructure and well -known supporters of the regime. Already in the past they met steelworks and petrol stations.

This time the Hackers published provocative wallet names such as “Fuckirgcterrorists”. Such names are technically difficult to create, which feeds the suspicion that the keys are not in the hands of the perpetrators. The stolen cryptos are actually lost – a political statement that harms Iran economically and symbolically.

Also read: Trump's crypto success: Founding rain through World Liberty Financial

Burned millions: no profit, just signal

What makes the incident so special: the stolen means were not moved or washed. Instead, they seem “burned” – that means they were sent to Wallets without private keys. This means that access is permanently lost.

According to blockchain analyst ZachxBT, this was not an ordinary theft, but an act with a political message. “These funds are basically lost forever, except central stable coin editors would make an exception,” he said. Such a procedure is extremely unusual in the world of cybercrime and underlines the ideological background of the attack.

Also read: Bitcoin forecast for June 2025: Realistic opportunities or pure speculation?

Nobitex reacts with crisis management

Nobitex publicly confirmed the incident and immediately initiated countermeasures. The platform was temporarily switched off to carry out an exact security check. According to their own statements, the so -called “cold wallets”, ie offline stored user funds, have remained safe.

In cooperation with the Iranian cyber police Fata, Nobitex is now trying to find the attackers. At the same time, the company promised to compensate for losses through its own reserves and an insurance fund. The trust of the users should be restored as quickly as possible – but the damage is not only financial in nature.

Part of a larger cyber conflict

The attack is a growing list of digital strokes between Israel and Iran. The cyber conflict of both states is becoming increasingly targeted, more professional and aggressive. Financial infrastructure is increasingly in focus – as before in attacks on Iranian Sepah Bank.

The attack on Sepah had recently led to failures in several bank branches. Customers could not withdraw money, which massively shook public trust. “Predatory Sparrow” seems to have a long -term goal: the destabilization of those institutions that are financially supported by the Iranian regime.

Also read: Ethereum forecast 2025-2030: Will the ETH course increase? Analysis & tips

An expensive year for crypto security

The incident at Nobitex is not isolated. According to the blockchain security company Certik, over $ 2.1 billion were stolen on crypto infrastructures by cyber attacks in 2025. Wallet attacks are the most expensive-in only 23 documented cases, over $ 1.6 billion has been caused.

The attacks are becoming more sophisticated and are increasingly reduced to classic security gaps. Ideological or geopolitical motifs play an increasingly central role. In this case, it was not relied on profit – but on maximum symbolic effects.

Does the blow really hit the regime – or the population?

It remains questionable whether the attack actually hits the Iranian regime. Critics doubt that the attack on Nobitex achieves the desired political effects. Because even if the platform is used by government agencies, it primarily serves millions of Iranians as a financial survival tool in everyday life. In an economy drawn by hyperinflation, sanctions and currency decay, cryptos is the only way for many citizens to protect their assets. For numerous users, the loss of funds therefore not only means financial damage, but the loss of an escape route.

In a repressive financial landscape like Iran, Krypto has developed into an unofficial lifeline. Many Iranians use Bitcoin and other cryptos to send or receive money abroad or receive from there – for example to support family members. International bank transfers are practically impossible due to sanctions. Nobitex filled this gap and thus became a central tool for financial self -help. The attack could thus hit the civilian population much more than the elites of the regime, which already has its own channels and asset structures.

next
News