
{"id":74500,"date":"2025-06-19T05:30:31","date_gmt":"2025-06-19T05:30:31","guid":{"rendered":"https:\/\/mycryptomania.com\/?p=74500"},"modified":"2025-06-19T05:30:31","modified_gmt":"2025-06-19T05:30:31","slug":"irans-top-crypto-hub-loses-82-million-to-hackers-with-israeli-links-details","status":"publish","type":"post","link":"https:\/\/mycryptomania.com\/?p=74500","title":{"rendered":"Iran\u2019s Top Crypto Hub Loses $82 Million To Hackers With Israeli Links\u2014Details"},"content":{"rendered":"<p>An onchain investigator has flagged a major breach at Iran-based Nobitex, where hackers made off with more than $81\u202fmillion in digital assets.<\/p>\n<p>Based on reports from blockchain sleuth ZachXBT, at least $81.7\u202fmillion was moved out of the exchange\u2019s hot wallets on June\u202f16, 2025. The stolen funds came from both the Tron network and various Ethereum Virtual Machine (EVM) chains.<\/p>\n<h2><strong>Massive Funds Drained From Hot Wallets<\/strong><\/h2>\n<p>According to ZachXBT\u2019s Telegram post, the first chunk\u2014$49\u202fmillion\u2014went through a vanity address that read \u201cTKFuckiRGCTerrorists\u2026mNX.\u201d A second custom address, \u201c0xffFFfFFffFF\u2026Dead,\u201d was used to pull the rest.<\/p>\n<p>These special wallet names aren\u2019t random. They show how attackers slipped around Nobitex\u2019s checks and grabbed funds meant to stay locked down.<\/p>\n\n<h2><strong>Vanity Addresses Exploit Access Controls<\/strong><\/h2>\n<p>Experts say the use of these human\u2011readable addresses points to a flaw in the exchange\u2019s internal controls. \u201cAttackers managed to infiltrate systems that should have blocked unauthorized wallets,\u201d noted Hakan Unal of Cyvers security. The exchange confirmed that it spotted the breach quickly and suspended the affected hot wallets.<\/p>\n<p><strong>Political Motive Behind The Breach<\/strong><\/p>\n<p>A pro\u2011Israel hacker group calling itself <a href=\"https:\/\/www.dlnews.com\/articles\/web3\/pro-israel-hacker-group-behind-iranian-crypto-exchange-theft\/\" target=\"_blank\" rel=\"noopener\">\u201cGonjeshke Darande\u201d claimed responsibility<\/a> in an X post. The group called Nobitex a tool for \u201cregime financing\u201d and threatened to release source code and internal files within 24\u202fhours.<\/p>\n<p>After the IRGC\u2019s \u201cBank Sepah\u201d comes the turn of Nobitex<br \/>\nWARNING!<\/p>\n<p>In 24 hours, we will release Nobitex\u2019s source code and internal information from their internal network.<br \/>\nAny assets that remain there after that point will be at risk!<\/p>\n<p>The Nobitex exchange is at the heart of the\u2026 <a href=\"https:\/\/t.co\/GFyBCPCFIE\">pic.twitter.com\/GFyBCPCFIE<\/a><\/p>\n<p>\u2014 Gonjeshke Darande (@GonjeshkeDarand) <a href=\"https:\/\/twitter.com\/GonjeshkeDarand\/status\/1935231018937536681?ref_src=twsrc%5Etfw\">June 18, 2025<\/a><\/p>\n<p>They warned that any assets left on the platform would be in danger. This hack comes as <a href=\"https:\/\/www.aljazeera.com\/news\/2025\/6\/18\/iran-warns-us-intervention-in-conflict-with-israel-risks-all-out-war\" target=\"_blank\" rel=\"noopener\">tensions<\/a> surged between Israel and Iran after Israel\u2019s largest strikes on Iran since the 1980s. Reports say at least 224 people died in Iran and 24 in Israel during the renewed conflict.<\/p>\n<p><strong>Cold Storage And User Security Assurances<\/strong><\/p>\n<p><a href=\"https:\/\/www.financemagnates.com\/cryptocurrency\/exchange\/iranian-crypto-exchange-nobitex-loses-82m-in-cyberattack-as-israel-iran-tensions-escalate\/\" target=\"_blank\" rel=\"noopener\">Nobitex<\/a> says users\u2019 main funds are safe in cold storage, and only a fraction of hot\u2011wallet assets were hit. The exchange promised to cover all losses with its insurance fund and internal resources. That promise should reassure customers, though the fear of leaked code or files could drive some to pull funds.<\/p>\n<p><strong>Unmoved Funds Could Reveal Next Steps<\/strong><\/p>\n<p>Interestingly, none of the stolen coins have moved since the hack was first spotted. That could mean the hackers are choosing their next move. Or it might be a warning shot meant to show they can strike again.<\/p>\n<p>Either way, this incident highlights how vital it is for exchanges to guard against insider\u2011level slip\u2011ups. Protocols alone aren\u2019t enough if people and processes leave doors open.<\/p>\n<p>As the crypto world watches, Nobitex users will be looking closely at how the platform rebuilds trust and keeps their money safe.<\/p>\n<p><em>Featured image from Unsplash, chart from TradingView<\/em><\/p>","protected":false},"excerpt":{"rendered":"<p>An onchain investigator has flagged a major breach at Iran-based Nobitex, where hackers made off with more than $81\u202fmillion in digital assets. Based on reports from blockchain sleuth ZachXBT, at least $81.7\u202fmillion was moved out of the exchange\u2019s hot wallets on June\u202f16, 2025. The stolen funds came from both the Tron network and various Ethereum [&hellip;]<\/p>\n","protected":false},"author":0,"featured_media":74501,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-74500","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-discovery"],"_links":{"self":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/74500"}],"collection":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=74500"}],"version-history":[{"count":0,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/74500\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/media\/74501"}],"wp:attachment":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=74500"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=74500"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=74500"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}