Iran-based crypto exchange Nobitex has reportedly been drained of over $81 million, with suspicious transactions spanning both Tron and various EVM-compatible networks, according to prominent blockchain investigator ZachXBT.
Initial findings suggested approximately $48.65 million in unauthorized outflows from Nobitex-linked wallets on the Tron network. However, subsequent analysis uncovered additional losses across other chains, raising the total to over $81 million.
Nobitex Confirms Breach, Promises Full User Compensation
Earlier today, Nobitex issued a statement acknowledging the security incident, confirming that part of its infrastructure, including a hot wallet, had been compromised through unauthorized access.
“We fully accept responsibility and guarantee that all affected users will be reimbursed using Nobitex’s insurance reserves and internal funds,” the platform assured its community.
The attacker reportedly used a customized Tron vanity address containing the phrase “TKFuckiRGCTerroristsNoBiTEXy2r7mNX”, prompting speculation that the exploit may be politically motivated. The “IRGC” reference is widely interpreted as a nod to Iran’s Islamic Revolutionary Guard Corps.
Pro-Israel Hacker Group Claims Responsibility
Shortly after the breach was publicized, a hacker group known as Gonjeshke Darande, which identifies as pro-Israel, claimed responsibility for the cyberattack.
“This operation was executed in response to Nobitex’s role in financing terrorism and evading international sanctions,” the group posted on X.
The timing of the exploit coincides with a period of heightened hostility between Iran and Israel, marked by missile strikes and escalating military actions.