Nobitex Hacked: $48M Stolen via TRON Wallet

Nobitex, Iran’s leading crypto exchange, lost $48M in a TRON wallet hack. Here's what happened, its impact, and how users can protect their assets now.

  • $48 M in USDT drained from Nobitex hot wallets on TRON.
  • Pro‑Israel group Gonjeshke Darande claims attack & threatens data leak.
  • Nobitex halts services, compensates via insurance; cold storage safe.

On June 18, 2025, Iranian crypto exchange Nobitex confirmed its hot wallets were accessed without authorization, resulting in the theft of over $48 million in USDT on the TRON network. The breach affected Nobitex’s hot wallet infrastructure and internal systems. In response, the exchange immediately suspended all trading and withdrawal services. Despite the incident, Nobitex emphasized that all user assets held in cold storage remain secure.

To reassure users, Nobitex announced that it will fully compensate affected customers using its insurance reserves and internal capital. The platform has started internal reviews and is working with security experts to trace the breach.

Who’s Behind the Nobitex Hack

The hacking group Gonjeshke Darande, also known as “Predatory Sparrow,” claimed responsibility for the Nobitex hack. This group accused the exchange of enabling terrorism and sanction evasion. They issued a warning that they would leak the company’s source code and sensitive internal data within 24 hours.

One of the most alarming elements of the hack is the vanity TRON address used to move the stolen funds: TKFuckiRGCTerroristsNoBiTEXy2r7mNX—a clear signal meant to attract attention and deliver a political message.

Cyber-War Tensions & Exchange Fallout

This attack is the latest in a series of cyber incidents amid heightened tensions between Iran and Israel. The same group previously claimed responsibility for cyberattacks on Iran’s financial institutions, including Bank Sepah.

Estimates of the stolen amount range between $48 million and $82 million, with some suggesting that additional assets in Bitcoin, Dogecoin, and other tokens were also affected. The full scope of the breach is still under investigation. Nobitex’s website and mobile apps remain offline as the company works to stabilize operations and address user concerns.

Read Also :

Disclaimer: The content on CoinoMedia is for informational purposes only and does not constitute financial, investment, or legal advice. Cryptocurrency investments carry risks, and readers should conduct their own research before making any decisions. CoinoMedia is not responsible for any losses or actions taken based on the information provided.

Aurelien Sage

Aurelien Sage is a blockchain enthusiast and writer, crafting insightful articles on decentralized technologies, Web3, and the future of finance. His work simplifies complex concepts, empowering readers to navigate the evolving crypto landscape with confidence.

Related Articles

Back to top button