Iran's largest cryptocurrency exchange, Nobitex, was hacked, resulting in the loss of approximately $82 million from its digital wallets.
The hacking group known as Gonjeshke Darande claimed responsibility for the attack and threatened to release the exchange's source code and internal documents.
Suspicious transactions totaling $81.7 million were tracked across Tron, Bitcoin, Dogecoin, and Ethereum-compatible networks.
The hackers used wallet addresses with anti-Iranian messaging to move the stolen funds.
Iran has increasingly utilized cryptocurrency exchanges like Nobitex to bypass international sanctions.
Nobitex confirmed the security breach, suspended operations, and assured users that assets in cold storage are secure.
The hackers accused Nobitex of aiding Iran in evading sanctions and financing terror activities.
Cybersecurity experts attribute the hack to compromised access controls across multiple blockchain networks.
The attack on Nobitex follows a cyberattack on Iran's state-owned Bank Sepah by the same hacking group.
The cyberattacks come amidst escalating tensions between Israel and Iran, with Israel launching strikes on Iranian targets.
The stolen cryptocurrency funds have not yet been moved or converted, according to security firm Cyvers.
This incident is seen as geopolitically motivated rather than purely financially driven.
More than $2.1 billion in digital assets has been stolen from cryptocurrency exchanges in 2025, according to CertiK.
The attack on Nobitex adds to the increasing list of cryptocurrency exchange hacks this year.
The attack on Nobitex highlights the intersection of cybersecurity threats, geopolitical tensions, and cryptocurrency vulnerabilities.