Iran’s largest crypto currency exchange Nobitex was attacked by a major cyber on the morning of June 19th. Pro-Israel Hacker Group Gonjeshke Darende seized at least $ 100 million crypto presence by empting the hot wallets of the stock market. Then he sent these funds to the burning addresses and took them permanently out of the circulation.

Following the attack, the Central Bank of Iran had to operate all local crypto exchanges in the country between 10: 00–20: 00. According to Chainalysis, this step was taken both to be more easily managed by possible attacks and to prevent capital outlets.

🔐 Which assets were targeted?

According to Chainalysis data, among the assets stolen in the attack:

Bitcoin (BTC)

Ethereum (ETH)

Dogecoin (Doge)

XRP

Solana (left)

such as leading crypto coins. It is stated that the wallet addresses used by the hacker group are special keyless “Burner” addresses and it is not possible to return.

🏛️ Is it a political message?

Andrew Fierman, President of the National Security of Chainalsis, said that this attack carries a political message beyond the traditional financial gain motivation:

“This seems to be a political motivated attack aimed at attracting direct assets from the Iranian regime.”

In Iran, the crypto is used as an alternative to the traditional financial system, especially for citizens, especially in international trade. For this reason, the regime wants to provide capital control by interfering with the stock exchanges.

🧊 Explanation from Nobitex: “Status Under Control” Following the attack, Nobitex announced that he had cut all external connections and secured the system. User transactions were temporarily frozen. The company has announced that it has activated reserve funds to compensate for damage.

In addition, all the remaining assets in the hot wallets are moved to cold wallets and a new security protocol is applied.

🌍 Nobitex, the heart of the crypto in Iran

According to Chainalysis, Nobitex is by far the largest player in the Iranian crypto market:

Total entry volume: 11 billion dollars

Greater than the sum of the other 10 Iranian stock exchanges

The main gateway to a global crypto in Iran

The stock market is also on the radar of international security authorities due to its potential relations with Houthis, al-Qaeda-related propagandists and Russian-based trades (Garantex, Bitpapa).

This hacking event is not just digital security; Geopolitics has a multi -layered meaning in terms of capital movements and state control. The pressures on the use of crypto in Iran may harden even more harder in the coming period. Central platforms such as Nobitex have become critical for both citizens and regimes.