Skip to content

Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed

Global Financial Service Disruptions

Nobitex

crypto exchange · IR · Middle East · Nobitex

Confirmed cyberStatus: unknownTier 1Severity 4 of 5Evidence confidence: highAnalyst-verified

Iran's largest crypto exchange Nobitex was hit on 18 Jun 2025 by Predatory Sparrow, which burned about 90M USD and later leaked source code. The exchange took its website and app offline, stopping all customer activity.

First disruption
Jun 18
First public signal
Jun 18 (Predatory Sparrow (Gonjeshke Darande) claim on X, then Nobitex statement)
Acknowledged
Jun 18
Restored
not yet
Duration
not established
DFX first recorded
Nov 5 14:58 UTC

What was restricted

allScope: institution wide

Website and app taken offline; all deposits, withdrawals and trading unavailable while investigating; source code later leaked.

Financial impact: About 81.7M to 100M USD destroyed or stolen (estimates; most cite about 90M USD).

Cause, kept in separate layers

What the institution said
Unauthorized access to parts of infrastructure, including internal communication systems and a portion of the hot wallet
DFX classification
Confirmed cyber (cyber: confirmed)
Analytical hypothesis (not established)
Politically motivated destruction (funds burned to vanity addresses) by an Israel-linked group during the Israel-Iran war.
Wording used
unauthorized access
Conflicting reports
Restoration date not verified in retrieved sources, so status is unknown.

Evidence