Iranian cryptocurrency exchange Nobitex has been hacked, losing more than $81 million in digital assets, according to on-chain investigator ZachXBT. The attack happened on the Tron network and other Ethereum-compatible blockchains.
How the Hack Happened
The hackers used vanity addresses (custom wallet addresses with specific words) to steal funds. The first stolen amount of $49 million was sent to a wallet named:
“TKFuckiRGCTerroristsNoBiTEXy2r7mNX”
Another address used was:
“0xffFFfFFffFFffFfFffFFfFfFfFFFFfFfFFFFDead”
Nobitex confirmed that some of its hot wallets (online wallets) were accessed without permission. The exchange said it stopped the breach quickly and assured users that their funds in cold storage (offline wallets) are safe.
Nobitex promised to cover all losses using its insurance fund and company resources.
Who Did It?
A pro-Israel hacker group called “Gonjeshke Darande” claimed responsibility. They said Nobitex helps Iran fund terrorism and bypass sanctions. The group threatened to release Nobitex’s internal files within 24 hours and warned users to withdraw funds.
Is This Hack Different?
Most crypto hacks are for money, but this one seems political. The stolen funds haven’t been moved yet, which is unusual.
Crypto Hacks in 2025
This is one of many crypto hacks this year. Over $2.1 billion has been stolen in 2025, mostly due to:
- Wallet breaches
- Poor key management
- Social engineering scams (tricking users into sending money)
Nobitex Wallet Activity
Nobitex’s wallet balance dropped 90% from $1.8 billion to $96 million, but experts say this could be due to routine wallet transfers, not more theft.
Bigger Conflict: Israel vs. Iran
The hack comes as Israel and Iran are in conflict. Israel recently launched major strikes on Iran, leading to hundreds of deaths. The Nobitex attack may be part of this cyberwarfare.
What’s Next?
- Nobitex will try to recover funds.
- The hacker group may leak Nobitex’s data.
- Users are warned to secure their assets.
This hack shows how crypto exchanges can be targets for both financial theft and political attacks.
