Israeli-Linked Group Hacks Iranian's Nobitex Exchange

Crypto News Exploits

Israeli-Linked Group Hacks Iranian's Nobitex Exchange, Threatens Data Leak

Written by Aaron S.,

Editor-In-Chief

Last Updated: June 18, 2025

Key Takeaways

Pro-Israel group Gonjeshke Darande said it hacked Nobitex and plans to leak its source code and internal files within 24 hours;
Over $81 million in crypto was stolen from Nobitex wallets using custom vanity addresses across Tron and Ethereum-compatible networks;
Nobitex froze hot wallet activity, confirmed cold wallets were safe, and pledged to reimburse all losses using insurance and company funds.

Stop overpaying - start transferring money with Ogvio. Sign up, invite friends & grab Rewards now! 🎁

Israeli-Linked Group Hacks Iranian's Nobitex Exchange, Threatens Data Leak

BITDEGREE IN YOUR SOCIAL FEED

"Gonjeshke Darande", a hacking group claiming ties to Israel, announced it had breached Nobitex, a crypto exchange based in Iran.

In a June 18 post on X, the group claimed it would publish the platform’s source code and internal data within 24 hours. They warned users that any assets still on the platform were at risk.

They also accused Nobitex of helping the Iranian government bypass international sanctions and fund overseas operations.

What is a Rug Pull in Crypto? (Meaning + Examples)

Did you know?

Want to get smarter & wealthier with crypto?

Subscribe - We publish new crypto explainer videos every week!

ZachXBT confirmed that over $81 million in digital assets had been removed from wallets connected to Nobitex. The stolen funds came from multiple blockchains, including Tron and networks compatible with the Ethereum ETH $3,128.83 Virtual Machine.

The attack used so-called vanity wallet addresses, custom addresses that include chosen characters.

One of the addresses used in the theft began with "TKFuckiRGCTerroristsNoBiTEXy2r7mNX", which was used to take roughly $49 million. Another wallet, starting with "0xffFFfFFffFFffFfFffFFfFfFfFFFFfFfFFFFDead", was linked to more outflows.

Nobitex later stated on X that some of its hot wallets had been accessed without permission. The exchange quickly paused activity in those wallets once the issue was identified.

The exchange noted that customer funds stored in cold wallets were not affected. The company also promised that all stolen assets would be covered using its insurance fund and company reserves.

Meanwhile, a recent exploit targeting Meta Pool allowed the attacker to walk away with just over $132,000 worth of Ethereum, despite minting nearly $27 million in tokens. Why? Read the full story.