Iranian crypto exchange Nobitex seemingly exploited for over $48 million: ZachXBT

Nobitex, Iran's leading cryptocurrency exchange, appears to have been hacked for $48.65 million on Tron, according to onchain sleuth ZachXBT.Zach wrote in his Telegram channel that there have been suspicious outflows from multiple wallets connected to the exchange.The cryptocurrency exchange notified users earlier today that its technical team had identified unauthorized access to a portion of its infrastructure and hot wallet. It added that customer funds remain secure. "Nobitex takes full responsibility for this incident and assures users that all incurred losses will be fully compensated through the insurance fund and Nobitex resources," the platform wrote.Nobitex did not specify the amount of assets affected by the incident.Meanwhile, ZachXBT reported that the alleged attacker used the vanity address "TKFuckiRGCTerroristsNoBiTEXy2r7mNX."The address contains "IRGC," which may refer to Iran's paramilitary force, the Islamic Revolutionary Guard Corps, which indicates that the exploit is potentially linked to the ongoing conflict between Iran and Israel.Prompted by deep-seated political and ideological tensions, Iran and Israel have escalated hostilities through a series of aggressive attacks, including missile barrages targeting each other’s cities and strategic sites.U.S. President Donald Trump has been working to broker a resolution by issuing stern warnings to Iran while exploring diplomatic channels, including deploying Vice President J.D. Vance to negotiate a potential ceasefire.Following ZachXBT's report, pro-Israel hacker group Gonjeshke Darande came out saying that it conducted the attacks on Nobitex."These cyberattacks are the result of Nobitex being a key regime tool for financing terrorism and violating sanctions," the group wrote on X. ZachXBT has also updated the exploited amount from $48.65 million to $73 million and added that there have been suspicious outflows from Nobitex wallets on EVM chains.Article updated with statement from Gonjeshke Darande and latest findings from ZachXBT.Disclaimer: The Block is an independent media outlet that delivers news, research, and data. As of November 2023, Foresight Ventures is a majority investor of The Block. Foresight Ventures invests in other companies in the crypto space. Crypto exchange Bitget is an anchor LP for Foresight Ventures. The Block continues to operate independently to deliver objective, impactful, and timely information about the crypto industry. Here are our current financial disclosures.© 2025 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.