Predatory Sparrow Claims Wipeout of $90 Million in Nobitex Hack
Hackers claiming affiliation with Predatory Sparrow, possibly linked to Israel, have executed a cyber‑strike against Nobitex, Iran's leading cryptocurrency exchange, erasing approximately $90 million worth of digital assets. The assault began in the early hours of 18 June 2025, when the group transferred diverse cryptocurrencies—including Bitcoin, Ethereum and Dogecoin—into vanishing crypto‑wallets designed without private keys, effectively 'burning' the funds to send a deliberate political message.
Blockchain analytics firms, including Elliptic and TRM Labs, analysed the transactions and found the emptied addresses bore anti‑IRGC messages, confirming the operation was ideologically motivated rather than financially driven. Elliptic noted that the assets were moved into vanity addresses with embedded slogans denouncing the IRGC, and that the group leaking the funds would not retain the keys, ensuring permanent loss.
Noble objective remains politically charged
ADVERTISEMENT
The group, using its Farsi‑named moniker Gonjeshke Darande—or 'Predatory Sparrow'—publicly accused Nobitex of facilitating Iran's sanctions evasion and funding militant groups, claiming the platform had enabled transactions for IRGC‑linked factions such as Hamas and Yemen's Houthis. Elliptic has traced past ties between Nobitex and IRGC‑affiliated actors, including sanctioned individuals like Amir Hossein Niakeen Ravari and Ahmad Khatibi Aghada.
The hack comes amid heightened Israel‑Iran tensions. Reports indicate that Predatory Sparrow also targeted Iran's state‑owned Bank Sepah on 17 June, triggering widespread service disruption, including to ATMs and fuel stations. Analysts interpret these cyber‑operations as extensions of conventional military retaliations between the two nations.
Nobitex disruptions raise alarm
Nobitex admitted to unauthorised access affecting both its app and website, temporarily shutting services while conducting assessments. Public updates from the exchange have been sparse, and customer inquiries have reportedly gone unanswered. Plans to recover or rebuild lost assets remain unclear, raising concerns among its claimed user base of over 7 million.
Despite accusations, Israel has not officially claimed responsibility. Media speculation within the country suggests government backing, but no formal confirmation has been issued. Predatory Sparrow, noted for previous impactful operations—from collapsing gas station networks in 2021 to prompting major fires at a steel mill in 2022—added this attack to its growing list of cyber engagements against Iranian infrastructure.
Impact and implications for crypto ecosystem
Cyber‑security analysts have labelled the hack 'particularly significant given the comparatively modest size of Iran's cryptocurrency market,' with Chainalysis intelligence chief Andrew Fierman underscoring the political overtones. The operation exemplifies how digital currencies and blockchain platforms are becoming tactical assets and vulnerabilities within geopolitical conflicts.
U.S. legislators, including Senators Elizabeth Warren and Angus King, previously raised concerns over Nobitex's facilitation of sanctions avoidance, highlighting its role in enabling Iran's IRGC and related proxies to move financial resources. This attack may intensify scrutiny on crypto exchanges suspected of abetting questionable transactions in sanctioned jurisdictions.
Decline of Iran's crypto defences
Crypto adoption in Iran has long served as a hedge against economic instability, with citizens and state‑linked groups alike using digital currencies to escape inflationary pressures and circumvent banking restrictions. Nobitex, in particular, developed significant traction, drawing millions of users seeking alternative financial tools.
However, analysts warn this sabotage could erode investor trust, disrupt public confidence in digital assets, and invite heightened regulatory oversight. Exchanges in politically sensitive regions may now face new security standards and sanctions compliance demands.
A new frontier in cyber‑warfare
This development underlines a shift where cyber‑warfare transcends state boundaries, now targeting third‑party financial networks with tangible consequences. By obliterating rather than stealing funds, Predatory Sparrow signalled that its operation aimed to disrupt Iran's crypto‑financing rather than profit from it.
Officials tracking these patterns warn that similar tactics may emerge as cyber‑tools of statecraft evolve, affecting financial systems across volatile regions. Experts suggest exchanges handling high‑risk jurisdictions should shore up defences and improve transparency around asset provenance and network resilience.
As Nobitex works to restore functionality, regulators, crypto stakeholders and intelligence services will closely examine the incident. The breach draws attention to the critical role of exchanges in global geopolitics, raising complex questions about neutrality, compliance and cybersecurity in an increasingly fraught digital economy.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Khaleej Times
15 hours ago
- Khaleej Times
How Bitcoin is changing from a volatile gamble to foundation for wealth-building
The crypto markets have been a bit shaky lately, thanks to even more geopolitical uncertainty. But what I haven't seen before — and what's been filling me with a new sense of pride and wonder — is Bitcoin holding steady. Really steady. In my short time exploring this space, that kind of stability is unheard of. Of course, it could crash by the time this is published, which got me thinking about one of the most common fears people who don't understand Bitcoin still cling to: 'What if it goes to zero?' However, it's a fear I no longer have. Let's rewind. I like to look up older prices of Bitcoin in times of uncertainty. But the prices can't be too old, or I start feeling sorry for myself that it took me so long to start investing. (Imagine buying Bitcoin on February 21, 2014, when it bottomed at $111.60 after the Mt Gox crypto exchange went bankrupt.) Eighteen months ago, Bitcoin was around $42,000 — up dramatically from $25,000 in September 2023. All it takes is a quick glance at the charts to see how dramatically Bitcoin has outperformed other, more traditional investing avenues like the S&P or gold, since its inception in 2009. And lately, it's starting to feel — dare I say — much less volatile, too. For those of us paying attention, that's a big deal. Because what happens when the asset once criticised for its volatility is no longer volatile — just as everyone from Pakistan to the US company GameStop wants it? Michael Saylor, co-founder of MicroStrategy, now Strategy, which is one of the world's biggest Bitcoin holders, said it plainly in a Bloomberg interview this month: 'Winter is not coming back. We're past that phase. If Bitcoin's not going to zero, it's going to $1 million.' His confidence rests on the core principles of Bitcoin, which include scarcity, immutability and resistance to inflation, along with steadily growing demand. More nations are signalling openness to Bitcoin and companies across the globe are adding it to their balance sheets. I didn't really expect this kind of shift. Like many others, I was just curious and figured I'd just sell some to capitalise if the value went up. But starting in summer 2024, I noticed the smartest-seeming people in this space started announcing: they have no plans to sell their Bitcoin. Ever. (To quote Saylor's February post on X: 'Sell a kidney if you must; but keep the Bitcoin.') But how can you use it, I wondered? The answer to that question is becoming obvious. There's an entire financial ecosystem developing around Bitcoin — one where you can benefit from ownership, and its potential growth, without ever having to let go of it. That part takes some mental rewiring, too. You have to forget everything you think you know about finance. I won't pretend to grasp all the technical stuff, but there are a few practical ways people are using their Bitcoin — and they actually make a lot of sense. One is crypto-backed loans. You use your Bitcoin as collateral to get a loan in regular money (or stablecoins), so you can cover expenses or invest while still holding on to your BTC. When you pay back the loan with interest, your Bitcoin is returned to you. It's a simple idea, and platforms like Strike and Milo in the US are already offering these tools. The interest rates will seem very high, but given BTC's forecasted growth, this is no payday loan scheme. I recently heard John Vasquez, a trusted US crypto voice, talking about borrowing at 14 per cent to fund a cash-flow business. He expected to pay it off in 10 months — and felt confident doing it. Then there are people like Mark Moss, founder of Market Disruptors, who spoke at Bitcoin Mena in Abu Dhabi last year. He's built an entire five-year retirement strategy for mere mortals around Bitcoin loans. His theory? Accumulate Bitcoin, borrow against it as it grows and skip tax events by never selling — keeping the principal intact. Some are using these loans to buy real estate or invest in other assets. Others are covering their living costs while their Bitcoin (hopefully) continues to appreciate. Of course, if the market drops, there's always the risk of liquidation, which is scary. Another method that's catching on: earning passive income by depositing Bitcoin on reputable platforms, where it functions like an interest-bearing account. These platforms lend your BTC to institutional borrowers and pay you a portion of the interest. (Just like a bank would with regular money) Sounds good in theory — but it does mean leaving your crypto on an exchange, which many in the space advise against. I'm still figuring that one out. For those who want to ease in, there are crypto-linked debit and credit cards, which let you borrow against your Bitcoin and pay off the balance monthly — just like a regular credit card. I have my eye on that option, although I don't see it yet in the UAE. One product I can see myself using: the new Bitcoin Rewards Credit Card, launching in the US this autumn. It's a partnership between Coin base and American Express, offering four per cent back in Bitcoin on every purchase. Bitcoin as the new air miles? On that one, when I can get it, I'm all in. Bitcoin might still feel fringe or futuristic, but what's clear to me is this: the ecosystem is growing, the tools are evolving, and the more I learn, the more I want to know.
Crypto Insight
20 hours ago
- Crypto Insight
OKX brings DEX aggregator to MetaMask with Consensys partnership
OKX has partnered with Ethereum software firm Consensys to launch its decentralized exchange (DEX) aggregator on MetaMask, offering users faster trade execution and reduced slippage. The collaboration integrates OKX's DEX API with MetaMask, giving the wallet's user base access to liquidity from over 500 DEXs across 25 blockchains, the exchange said in a news release shared with Cointelegraph. 'MetaMask's ambitious multichain strategy toward becoming a universal wallet for the Web3 ecosystem aligns with the connected blockchain ecosystem we're helping to build,' said Jeff Ren, founder of OKX Ventures. Ren added that the OKX DEX aggregator connects MetaMask users to over 500 liquidity sources with execution speeds under 100 milliseconds. 'We share a vision of a more accessible blockchain ecosystem where technical barriers disappear.' OKX Wallet adopts MEV protection As part of the deal, OKX Wallet has also adopted Consensys' SERVO, a solution designed to defend users against maximum extractable value (MEV) attacks. The integration is the first time Consensys has partnered externally to embed SERVO into a third-party wallet. 'MEV remains a complex challenge,' said Jason Linehan, chief strategy officer at Consensys. 'OKX's integration of Consensys SERVO reflects a strong commitment to user safety and protocol-aligned innovation.' The partnership comes at a time when onchain trading is reaching execution parity in price and speed with centralized exchanges, Ren said. He added that DEX to CEX volume ratios continue to climb, indicating increased interest in decentralized trading avenues. Looking forward, Ren said the future of trading will rely on a diverse ecosystem where DEX aggregators, specialized decentralized exchanges, and centralized platforms coexist to support seamless asset movement and reduce liquidity concentration. OKX adds new safeguards after DEX misuse In March, OKX temporarily suspended its DEX aggregator after detecting an attempted misuse by North Korea's Lazarus Group. The suspension came amid reports that EU regulators were investigating OKX Web3 and its wallet services for allegedly facilitating money laundering from the $1.5 billion Bybit hack. In response, the firm has rolled out new safeguards, including real-time blocking of suspicious addresses and warning alerts for potentially dangerous transactions, Ren said. Audits from CertiK, Hacken and SlowMist, plus an ongoing bug bounty program, backed these measures. Source:
Sharjah 24
a day ago
- Sharjah 24
Iran appoints new Revolutionary Guards intelligence chief
Major General Mohammad Pakpour, the commander of Iran's Revolutionary Guards Corps (IRGC), appointed Brigadier General Majid Khadami as the new head of its intelligence division, Irna said. He replaces Mohammed Kazemi, who was killed on Sunday alongside two other Revolutionary Guards officers -- Hassan Mohaghegh and Mohsen Bagheri -- in an Israeli strike. Pakpour had himself been recently appointed after Israel killed his predecessor Hossein Salami in a strike on June 13. "During the years that our martyred commanders Kazemi and Mohaqeq led the IRGC Intelligence, we witnessed significant growth in all aspects of intelligence within the IRGC," said Pakpour. Israel launched air strikes on nuclear and military sites in Iran last week, claiming that its arch enemy was on the verge of developing a nuclear weapon, which Iran denies. Israel killed several top Iranian officials, prompting a counter-attack by Iran, which on Thursday hit an Israeli hospital. Upon his appointment by Iran's supreme leader Ali Khamenei last Friday, Pakpour threatened to open "the gates of hell" in retaliation for Israel's attacks. Top Israeli figures have openly talked about killing Khamenei.
