Breaking: Iranian crypto exchange Nobitex hit by $48.6m hack, Gonjeshke Darande takes credit

Iranian crypto exchange Nobitex, Iran’s largest cryptocurrency platform, has suffered a devastating $48.6 million exploit on the Tron network, marking one of the biggest crypto heists in the country’s history.

Blockchain investigator ZachXBT first flagged suspicious outflows from multiple wallets tied to Iranian crypto exchange Nobitex, with funds rapidly funneled into untraceable addresses.

In an emergency statement, Iranian crypto exchange Nobitex confirmed unauthorized access to its hot wallets but assured users that cold storage assets—where most customer funds are held—remain untouched. The exchange has temporarily suspended all operations while investigations continue.

“Nobitex takes full responsibility for this incident and guarantees that all losses will be covered by our insurance fund and internal reserves,” the platform announced.

Hacker group Gonjeshke Darande takes credit, ties attack to sanctions evasion

The politically motivated hacker collective Gonjeshke Darande (Predatory Sparrow)—linked to past cyberattacks on Iranian infrastructure—publicly claimed responsibility. The group accused Iranian crypto exchange Nobitex of being a key tool for the Iranian regime to bypass international sanctions and fund militant proxies.

“Nobitex doesn’t even pretend to comply with sanctions. It openly teaches users how to evade them,” the hackers stated.

It is adding that working for Iranian crypto exchange Nobitex is considered equivalent to military service due to its role in financing Iran’s activities.

This attack follows a pattern of high-profile strikes by Gonjeshke Darande, including:

• 2025 Bank Sepah breach: Wiped data from a U.S.-sanctioned Iranian bank.

• 2023 gas station disruptions: Crippled 70% of Iran’s fuel pumps.

• 2022 steel industry leaks: Exposed ties between factories and the IRGC.

Why this hack intensifies pressure on Iran’s crypto economy

As the primary hub for Iran’s crypto trading, Iranian crypto exchange Nobitex has long been scrutinized for its alleged role in facilitating sanctions evasion. The exploit deals a severe blow to trust in the platform and raises urgent questions about security practices in loosely regulated markets.

Analysts warn that the breach could accelerate crackdowns on crypto exchanges operating in high-risk jurisdictions.

“This isn’t just about theft—it’s a geopolitical strike,” said one blockchain security expert. “Nobitex’s vulnerabilities make it a target for both criminals and state-backed actors.”