Hackers attack Iran’s largest cryptocurrency exchange, threaten to leak data

• Hacker attack hits Nobitex and compromises hot wallet
• Predatory Sparrow Group Threatens to Expose Source Code and Data
• Iranian stock exchange suspends operations after security breach

Iran’s largest cryptocurrency exchange Nobitex has suffered a serious cyberattack that resulted in losses exceeding $48 million. according to analysis from blockchain researcher ZachXBT. The breach compromised part of the platform’s hot wallet and its reporting infrastructure.

The pro-Israel hacktivist group known as Predatory Sparrow claimed responsibility for the attack. In a public statement, the hackers accused Nobitex of helping the Iranian government circumvent international sanctions and of being part of its military and financial structure.

In a threatening tone, the group announced that it will release Nobitex's source code, as well as user data, if the platform does not take immediate action. "All assets left on the platform after this period will be at risk," the attackers warned.

After the IRGC's “Bank Sepah” comes the turn of Nobitex
WARNING!

In 24 hours, we will release Nobitex's source code and internal information from their internal network.
Any assets that remain there after that point will be at risk!

The Nobitex exchange is at the heart of the… pic.twitter.com/GFyBCPCFIE

— Gonjeshke Darande (@GonjeshkeDarand) June 18, 2025

The broker acknowledged the incident in release posted on the X network, confirming that there was unauthorized access to its hot wallet and internal systems. “Our technical team detected signs of unauthorized access to part of our reporting infrastructure and hot wallet. Immediately upon detection, all access was suspended, and our internal security teams are closely investigating the extent of the incident,” Nobitex said.

The company stressed that the majority of users’ crypto assets are safe in cold storage. “Users’ assets are completely safe according to cold storage standards, and the above incident only affected a portion of the assets in hot wallets,” the exchange highlighted.

During the investigation process, the platform's operations — both on the website and the app — were temporarily suspended. Nobitex assured that it will cover all losses with its own resources and the insurance fund.

In the same period, the Predatory Sparrow group also claimed responsibility for a cyberattack on Sepah Bank, a state-owned entity linked to the Islamic Revolutionary Guard Corps, claiming to have deleted banking data and accusing the bank of financing military operations.