Iranian crypto exchange Nobitex was hacked for $48M, with hot wallets and parts of its reporting infrastructure targeted.
Nobitex immediately suspended all access, initiated an internal investigation, and assured users of compensation through insurance and company resources.
The breach did not compromise cold wallet funds, and the platform took its website and mobile app offline during the investigation.
A group named "Gonjeshke Darande" or "Predatory Sparrow" claimed responsibility for the attack, alleging Nobitex's involvement in supporting the Iranian regime and sanctions evasion.
Predatory Sparrow threatened to leak Nobitex's source code and internal documents, raising concerns for users' assets on the exchange.
While no direct ties to the Israeli government have been confirmed, Predatory Sparrow is described as "Israel-linked" by some media outlets.
The incident represents one of the largest crypto breaches in the Middle East this year, highlighting the increasing intersection of cyberwarfare with the global crypto economy.