This event is archived. Final snapshot from when the story concluded. View on Dashboard
Events / Geopolitical / Nobitex Cyberattack Amid Israel-Iran Conflict
International cyberattack

Nobitex Cyberattack Amid Israel-Iran Conflict

Analysis based on 7 articles · First reported Jun 19, 2025 · Last updated Jun 19, 2025

Sentiment
-70
Attention
4
Articles
7
Market Impact
General
Live prominence charts, article sentiment distribution, and event development timeline available on the Ergen Dashboard
Market Impact

The cyberattack on Nobitex, Iran's largest cryptocurrency exchange, by Predatory Sparrow, resulted in a loss of over $90 million and exposed its source code, severely impacting Nobitex's operations and reputation. This event highlights the risks of cryptocurrency exchanges being used for illicit activities and escalates geopolitical tensions between Iran and Israel, potentially leading to increased scrutiny and regulation of the cryptocurrency market.

cryptocurrency financial services national security
Event Summary

Hackers from the group Predatory Sparrow, with possible links to Israel, have executed a major cyberattack on Nobitex, Iran's largest cryptocurrency exchange. The attack resulted in the theft of over $90 million in various cryptocurrencies, including Bitcoin, Ethereum, and Dogecoin, and the public release of Nobitex's full source code. The stolen funds were transferred to wallets containing messages critical of the Islamic Revolutionary Guard Corps, indicating a political rather than financial motivation. Predatory Sparrow accused Nobitex of facilitating Iran's evasion of Western sanctions and transferring funds to militant groups such as Hamas and Yemen's Houthis. Nobitex confirmed unauthorized access to its systems, leading to its app and website going offline. This incident is part of escalating tensions in the Israel-Iran conflict, following recent Israeli strikes on Iranian nuclear sites and military officials, and Iran's retaliatory missile attacks. Predatory Sparrow has a history of cyberattacks against Iran, including previous operations against Bank Sepah, gas stations, and a steel mill.

Key Actions
100 Predatory Sparrow drained funds Nobitex
95 Predatory Sparrow leaked source code Nobitex
80 Nobitex assessed unauthorized access
70 Iran evaded sanctions
70 Iran transferred money
60 Predatory Sparrow destroyed data Bank Sepah
50 Israel threatened to strike Iran
50 Iran retaliated Israel
Entities Involved
exch
Nobitex
Nobitex, Iran's largest cryptocurrency exchange, was the target of a cyberattack by Predatory Sparrow, resulting in the theft of over $90 million and the exposure of its source code. The attack severely damaged its reputation and operational capabilities.
Importance 100.0 Sentiment -90.0
oth
Predatory Sparrow
Predatory Sparrow, a hacker group with possible links to Israel, claimed responsibility for the cyberattack on Nobitex, stealing funds and exposing its source code as a political message against Iran's government and its alleged support for militant groups.
Importance 95.0 Sentiment 0.0
cnt
Iran
Iran's government is accused of using Nobitex to evade Western sanctions and fund militant groups. The cyberattack highlights vulnerabilities in its financial infrastructure and intensifies geopolitical tensions.
Importance 90.0 Sentiment -60.0
cnt
Israel
Israel is widely reported to have links to the hacker group Predatory Sparrow, which carried out the cyberattack on Nobitex. This event is part of escalating tensions in the Israel-Iran conflict.
Importance 70.0 Sentiment -20.0
mil
Islamic Revolutionary Guard Corps
The stolen funds from Nobitex were transferred to addresses criticizing the Islamic Revolutionary Guard Corps, and the group is accused of using Nobitex for illicit financial activities.
Importance 60.0 Sentiment -50.0
mil
Hamas
Hamas is one of the Iranian allies that allegedly received funds from Nobitex, according to evidence shared by Elliptic.
Importance 40.0 Sentiment -50.0
mil
Houthis
Yemen's Houthis are among the Iranian allies that allegedly received funds from Nobitex, as indicated by Elliptic's findings.
Importance 40.0 Sentiment -50.0
priv
Bank Sepah
Bank Sepah, an Iranian state-controlled bank, was also targeted by Predatory Sparrow in a prior cyberattack, where data was reportedly destroyed.
Importance 30.0 Sentiment -30.0
per
Ali Khamenei
Relatives of Iran's Supreme Leader Ali Khamenei are reportedly linked to Nobitex, further implicating the Iranian government in the exchange's activities.
Importance 20.0 Sentiment -30.0
crypto
Dogecoin
Dogecoin was one of the cryptocurrencies affected by the Nobitex hack.
Importance 10.0 Sentiment -10.0
crypto
Bitcoin
Bitcoin was one of the cryptocurrencies stolen in the Nobitex hack, highlighting the risks associated with digital asset exchanges.
Importance 10.0 Sentiment -10.0
crypto
Ethereum
Ethereum was among the cryptocurrencies stolen from Nobitex during the cyberattack.
Importance 10.0 Sentiment -10.0
Relationships
Nobitex related ↔ Iran
Nobitex related ↔ Islamic Revolutionary Guard Corps
Iran enemies ↔ Israel Iran is engaged in direct military conflict with Israel, launching retaliatory missile and drone strikes against Israeli
Iran related ↔ Islamic Revolutionary Guard Corps
Iran related ↔ Hamas
Iran related ↔ Houthis
Iran related ↔ Bank Sepah
Iran related ↔ Ali Khamenei
Israel related ↔ Islamic Revolutionary Guard Corps
Israel related ↔ Hamas
Israel related ↔ Houthis
Israel related ↔ Bank Sepah
Israel related ↔ Ali Khamenei
Islamic Revolutionary Guard Corps related ↔ Hamas
Islamic Revolutionary Guard Corps related ↔ Houthis
+ 4 more relationships View on Dashboard
ERGEN INTELLIGENCE
Track this event live

Set up alerts, explore entity relationships, search across thousands of events, and build custom intelligence feeds.

Open Dashboard

About Ergen

Ergen is a news intelligence platform that converts raw news articles into structured data. It tracks events, entities, and the relationships between them, with sentiment and attention metrics derived from thousands of articles. Pages on this site are daily static snapshots from the platform's live database. For real-time tracking, search, and alerts, the full dashboard is at app.ergen.ai.