The pro-Israel hacking group Predatory Sparrow has claimed responsibility for a major cyberattack on Nobitex, Iran’s largest crypto exchange, stealing and burning over $90 million in cryptocurrency in a politically motivated move.
The attack occurred on June 18, 2025, with Nobitex confirming the breach the next day, citing unauthorized access to part of its reporting infrastructure and hot wallet. The platform has remained offline since.
Predatory Sparrow announced the hack via its Gonjeshke Darande account on X, accusing Nobitex of helping Iran’s regime finance terrorism and evade sanctions. The group also threatened to release Nobitex’s internal source code and data.
Blockchain firm Elliptic confirmed the stolen funds were sent to cryptographic wallet addresses with anti-IRGC messages, making the assets permanently inaccessible. According to Elliptic, generating such vanity addresses is computationally infeasible, indicating the group’s intent to destroy the funds rather than profit from the breach.
The attack comes just a day after Predatory Sparrow targeted Iran’s Bank Sepah, signaling an intensified campaign against Iran’s digital financial infrastructure





