Iranian crypto exchange Nobitex seemingly exploited for over $80 million: ZachXBT

Iranian cryptocurrency exchange Nobitex appears to have been exploited for over $81 million across Tron and EVM-compatible chains, according to onchain sleuth ZachXBT.

ZachXBT initially reported $48.65 million in suspicious outflows from wallets linked to the platform on the Tron network, later updating the figure to $81 million as further transactions were identified on other chains.

The cryptocurrency exchange notified users earlier today that its technical team had identified unauthorized access to a portion of its infrastructure and hot wallet. 

"Nobitex takes full responsibility for this incident and assures users that all incurred losses will be fully compensated through the insurance fund and Nobitex resources," the platform wrote.

The attacker used a Tron vanity address containing the string “TKFuckiRGCTerroristsNoBiTEXy2r7mNX,” with “IRGC” possibly referencing Iran’s Islamic Revolutionary Guard Corps. This has raised speculation that the exploit may be connected to the broader conflict between Iran and Israel.

Tensions between the two countries have escalated in recent months, including missile strikes targeting cities and strategic locations.

Following ZachXBT’s findings, pro-Israel hacker group Gonjeshke Darande claimed responsibility for the attack.

"These cyberattacks are the result of Nobitex being a key regime tool for financing terrorism and violating sanctions," the group wrote on X. 

Article updated with statement from Gonjeshke Darande and latest findings from ZachXBT.