Pro-Israel Hackers Claim Responsibility for $90 Million Theft from Iran’s Largest Crypto Exchange
By Sean Lyngaas, CNN
On June 18, 2025, hackers reportedly stole approximately $90 million from Nobitex, Iran’s largest cryptocurrency exchange, a significant event likely to have far-reaching implications amid ongoing tensions in the region. The pro-Israel hacking group known as “Predatory Sparrow” has claimed responsibility for the attack, suggesting that their actions were part of a strategy to further destabilize Iran during a period of heightened military conflict centered around Israeli strikes targeting Tehran.
Details of the Cyberattack
The breach was confirmed by various independent cryptocurrency tracking firms, which reported that the stolen digital assets were transferred to crypto wallets effectively beyond control of any party, potentially rendering them untraceable and inaccessible. In a striking display of defiance, the hackers posted on the social media platform X (formerly known as Twitter) in Farsi, asserting that Nobitex was being utilized by Iran to bypass international sanctions.
In response to the theft, Nobitex announced on its website that access to its platform has been suspended as a precautionary measure. The situation underscores the precarious position of cryptocurrency exchanges within the complex geopolitical landscape of Iran, where many observers contend that they serve as crucial financial lifelines in the face of extensive sanctions.
The Ongoing Cyber Conflict
This incident is part of a broader pattern of cyber warfare between Israel and Iran, illustrating an escalation in hostilities that have permeated both countries in recent years. Predatory Sparrow, which emerged prominently in the cyber arena over the past five years, has been linked to numerous previous incidents that have targeted Iranian infrastructure, including attacks on a steel mill and payment processing systems across gas stations. The group portrays itself as a faction of Iranian hacktivists opposing government operations, although cybersecurity experts suspect it operates with some level of support from Israeli intelligence.
In addition to the Nobitex hack, Predatory Sparrow claimed responsibility for a separate cyberattack that compromised data at Iran’s state-owned Bank Sepah. The group alleged that members of Iran’s Islamic Revolutionary Guard Corps (IRGC) were using the bank for their operations, justifying their actions as a blow against the military organization. Subsequent reports indicated that residents in Tehran experienced significant disruptions, with reports of malfunctioning ATM machines exacerbating the situation for ordinary citizens already grappling with financial difficulties.
Broader Implications of Cyber Warfare
The impact of these cyberattacks extends beyond those directly targeted; citizens of Iran could feel the ramifications as they increasingly rely on cryptocurrency in light of financial restrictions imposed by sanctions. Experts caution that while Predatory Sparrow may frame its actions as targeting the IRGC, the consequences may inadvertently ripple throughout Iranian society.
While the conflict between Israel and Iran escalates and manifests in both physical and digital realms, misinformation campaigns have also arisen. Meanwhile, citizens in Israel have received misleading text messages reported by authorities purporting air raid information, while the Iranian government has urged citizens to avoid using messaging applications like WhatsApp, suspecting surveillance by Israeli forces. Meta, the parent company of WhatsApp, has disputed these claims, asserting that the platform utilizes end-to-end encryption to ensure user privacy.
The evolving dynamics of this conflict suggest that both physical warfare and cyber operations will continue to play integral roles as Israel and Iran navigate their fraught relationship.
As cybersecurity measures and countermeasures intensify, the global community watches closely, aware that the ramifications of these attacks extend beyond the immediate financial losses, touching on wider geopolitical concerns that are likely to alter the landscape of Middle Eastern alliances and enmities for years to come.
CNN’s Muhammad Darwish contributed to this report.