Iran’s largest cryptocurrency exchange, Nobitex, has been hit by a severe cyberattack, with hackers leaking the platform’s full source code just a day after stealing over $100 million in digital assets. The attackers, a pro-Israel group calling itself Gonjeshke Darande, claimed responsibility for the exploit and escalated the breach by publishing sensitive internal files on social media.
$100M Hack Linked to Israel-Iran Tensions
The cyberattack occurred during heightened geopolitical tensions between Israel and Iran, as the two nations engage in renewed military strikes. The group behind the hack claimed that Nobitex’s ties to Iran’s government and alleged violations of international sanctions motivated the assault.
In an X (formerly Twitter) post on Thursday, Gonjeshke Darande declared:
“Time’s up — full source code linked below. Assets left in Nobitex are now entirely out in the open.”
The leak includes Nobitex’s privacy protocols, blockchain cold storage scripts, server lists, and a zip file containing the full source code.
Political Statement, Not Just Financial Theft
Blockchain security expert Yehor Rudytsia of Hacken told Cointelegraph that the wallet addresses used in the exploit suggest a political motive rather than typical financial gain. The attackers reportedly sent funds from more than 20 token types to burner addresses, with $90 million permanently destroyed.
“There is little chance of recovery except possibly for $55 million USDT, if Tether chooses to reissue the tokens,” Rudytsia noted.
Iran’s Crypto Sector Reacts
Nobitex issued a statement confirming no further financial losses but warned that ongoing internet disruptions inside Iran were slowing recovery efforts. The platform aims to resume services within five days. Iranian media reported that the central bank has now imposed new restrictions, limiting domestic crypto exchanges’ operating hours to 10 a.m. to 8 p.m. amid national security concerns.
CEO Amir Rad is expected to deliver a public video statement outlining Nobitex’s next steps.
As the largest crypto hack in Iran’s history, this breach highlights both the growing risks of cyber warfare in the Middle East and the vulnerability of key financial platforms.
Disclaimer: The information in this article is for general purposes only and does not constitute financial advice. The author’s views are personal and may not reflect the views of Chain Affairs. Before making any investment decisions, you should always conduct your own research. Chain Affairs is not responsible for any financial losses