Nobitex, Iranian crypto exchange has been exploited worth over $80M

[Antotena]

In the early hours of today, it was reported that a popular crypto exchange in Iran has been exploited by some group of people. Coins like Bitcoin, Tron, Doge and other Evm were moved from the exchange wallets and sent to the following vanity addresses.

• TKFuckiRGCTerroristsNoBiTEXy2r7mNX
• 0xffFFfFFffFFffFfFffFFfFfFfFFFFfFfFFFFDead
• DFuckiRGCTerroristsNoBiTEXXXWLW65t

Source: https://x.com/nobitexmarket/status/1935222149989519671
          : https://x.com/watcherguru/status/1935232104347877422

This is all link to what's happening between Israel and Iran recent fight but do we have to involved innocent businesses and peoples money.

-Not your keys, not your funds.

[Oshosondy]

Coins like Bitcoin, Tron, Doge and other Evm were moved from the exchange wallets and sent to the following vanity addresses.

The addresses starts from T, 0x and Do, that are not bitcoin addresses, bitcoin addresses start from 1, 3 or bc1. Or is there where I omitted bitcoin address?

Gonjeshke Darande hacked the exchange. Gonjeshke Darande is a pro-Israel hacker group in Israel.

I wish the escalating war is stopped.

Edit: Seen, this is the bitcoin address: 1FuckiRGCTerroristsNoBiTEXXXaAovLX

[The Cryptovator]

Yes, I heard this news from Cointelegraph notifications from their Telegram channels. Any exploit isn't expected, but this seems to be the result of a recent Iran and Israel war. Every war destroys either real-life things or virtual things. Also, we can see the crypto market crashed a little bit for the current war. Though these exploits don't have much effect on the crypto market, for the exchange users, the amount is big. Don't know how the exchange will recover those losses.

The exploit reminds us again about not storing our cryptocurrency in any exchange. Just exchange and move your coins to your own wallet. Otherwise, you need to be ready to lose your funds, because every exchange won't compensate for your loss. I pray to stop the war and come to a solution. War won't bring any good things; people are losing their lives and won't recover ever.

[cryptoaddictchie]

This is all link to what's happening between Israel and Iran recent fight but do we have to involved innocent businesses and peoples money.

-Not your keys, not your funds.

I dont know with the rules of war but this could be another tactics by the enemy of Iran, well target their plausible source fund in the matter. But honestly, does this means that attacking or stealing funds from their opponent is decent move when it comes to war? It might not be from Iran Government but the citizens of Iran also got affected by these war events.

[NotATether]

Coins like Bitcoin, Tron, Doge and other Evm were moved from the exchange wallets and sent to the following vanity addresses.

The addresses starts from T, 0x and Do, that are not bitcoin addresses, bitcoin addresses start from 1, 3 or bc1. Or is there where I omitted bitcoin address?

Exactly. T is a Tron address. D is a Dogecoin address.

Gonjeshke Darande hacked the exchange. Gonjeshke Darande is a pro-Israel hacker group in Israel.

And it looks like they burned all of the coins. They didn't even steal them or anything.

[albon]

If this group is backed by Israel, then this is a cyber war similar to a real-life war. Unfortunately, the platform users will pay the price for this war, because centralized exchanges are always vulnerable to these tensions and cyberattacks , whether it’s hacking or bankruptcy.

$80 million is not a small amount. These recurring incidents teach us an invaluable lesson: never store funds on CEXs. There are no guarantees your money will be safe long-term. Buying a hardware wallet for a few dollars is a great way to save yourself the headache.

[Z-tight]

I am just hearing about this exchange for the first time, but it is the largest cryptocurrency exchange in Iran and a lot of Iranians use their service, too bad $90m of customers funds were stolen and burned, because from what i read, the funds were sent to burner addresses, so that makes this even more crazy and painful for the victims.

Take note that the same group that took responsibility for this attack were also responsible for the attack on Iran's state-owned bank Sepah earlier in the week, so it is obvious that this group is targeting Iranian services on purpose, which is another angle to the war.

[Darker45]

This is obviously all part of the conflict. This is why everybody should hate wars. It's actually a free-for-all violence. Civilians are killed. Private properties reduced to rubles. Money is wasted.

Many are saying Bitcoin is a way for them to protect their money in times of war because banks would be closed, ATMs unrefilled, withdrawals not allowed, stocks plunge, fiat value nosedives, and so on. Well, it's only true if it's kept in self-custody. Otherwise, it's pointless. If kept in a custodial wallet, it could end up a collateral damage, as clearly demonstrated in this case.

[Despairo]

Now we know how weak are the security in unpopular centralized exchanges.

Local exchanges are prone against hack because they haven't been tested and threatened many times just like popular exchanges.

Shame on Israel, they're trying to attack in any aspect even it's illegal, they exploit and attacking financial institutions means they're also attacking the civilians.

[Z-tight]

Now we know how weak are the security in unpopular centralized exchanges.

Local exchanges are prone against hack because they haven't been tested and threatened many times just like popular exchanges.

This is not true, any centralized exchange can be hacked, Binance has been hacked in the past, Bybit was hacked recently and so many other popular exchanges have either be hacked for funds or customer data. The best recommendation is not to store funds in any centralized exchange at all.

I even believe attackers go after bigger exchanges more than the smaller ones, because they handle a lot of customers funds and the attackers have a lot to gain if they successfully attack them, either for funds or to steal data.

[Yaunfitda]

Now we know how weak are the security in unpopular centralized exchanges.

Local exchanges are prone against hack because they haven't been tested and threatened many times just like popular exchanges.

Shame on Israel, they're trying to attack in any aspect even it's illegal, they exploit and attacking financial institutions means they're also attacking the civilians.

And I don't know if there are still people who uses this kind of exchange? I never heard of it before, so again, maybe some of us here are familiar and could have used it at one point and could have been a victim. It's very hard to comment though on the attack, on who is behind it. Maybe there is political motive behind, but we can only pray that it will stop or at least it won't be escalating into a full blow war. In any case, another proof that everyone is vulnerable, not just this low tier exchange. We have seen even high level exchange being attacked as way. So if we could only keep our on crypto in a wallet that we control, then it's a better practice for us.

[Fiatless]

I am just hearing about this exchange for the first time, but it is the largest cryptocurrency exchange in Iran and a lot of Iranians use their service, too bad $90m of customers funds were stolen and burned, because from what i read, the funds were sent to burner addresses, so that makes this even more crazy and painful for the victims.

Take note that the same group that took responsibility for this attack were also responsible for the attack on Iran's state-owned bank Sepah earlier in the week, so it is obvious that this group is targeting Iranian services on purpose, which is another angle to the war.

Sad news for people who are already devastated by attacks from Israel.  Many of the affected users are citizens who will have to suffer at this time when they need money to evacuate. If this set of hackers didn't take responsibility and the funds were not sent to burner addresses, the media would have linked them to the North Korean Lazarus Group as usual.

The war is now multifaceted because it is not only fought on the battlefield. The exchange has made a statement that customers will get their funds since it is insured. Let's see how things will unfold.

And I don't know if there are still people who uses this kind of exchange? I never heard of it before, so again, maybe some of us here are familiar and could have used it at one point and could have been a victim.

It is very popular in Iran.

[Z-tight]

And I don't know if there are still people who uses this kind of exchange? I never heard of it before, so again, maybe some of us here are familiar and could have used it at one point and could have been a victim.

If you are not an Iranian, then you would probably not know this centralized exchange, but like i have already said, it is the largest cryptocurrency exchange in Iran, so any Iranian in the crypto industry would surely know this exchange. Take note that so many countries and services have sanctioned Iran, so i am sure a lot of Iranians use this service.

It's very hard to comment though on the attack, on who is behind it. Maybe there is political motive behind,

Everything is already in this thread, we know who is behind it, it is a hacker group from Israel named "Gonjeshke Darande". The crazy thing is that this hacker group have also threatened to release Nobitex's source code and internal files, so the trouble for customers of this service may be far from ending.

[fikrett]

It's more about sending a message than stealing, as it was outlined.

Bad for the people, surely, and I wonder who would refund them something, and if there will be a refund in the first place..

[Ruttoshi]

What would these hackers gain for the action of theirs because it's bad to render someone poor in a state of war. This is can kill the victims very slow without been hit by a bullet or bomb since many of the victims might have their life savings kept in the exchange. Some people don't learn from others mistake and prefer to become victims.

I hope that the war will stop soon and let there be peace. When you are at war, the number of your enemies increases. I hope that those newbies using exchanges to keep their funds will learn from this and be in self custody of their funds by using a noncustodial wallet. Not your keys, not your coins.

[Fiatless]

Everything is already in this thread, we know who is behind it, it is a hacker group from Israel named "Gonjeshke Darande". The crazy thing is that this hacker group have also threatened to release Nobitex's source code and internal files, so the trouble for customers of this service may be far from ending.

According to a report, Gonjeshke Darande has already released the full source code of the exchange.

It's more about sending a message than stealing, as it was outlined.

Bad for the people, surely, and I wonder who would refund them something, and if there will be a refund in the first place..

Services have been suspended in Nobitex. But they promised customers that operations would resume in five days, but the Internet challenges caused by the war might make their recovery longer.

https://www.tradingview.com/news/cointelegraph:4acfc8cc3094b:0-nobitex-source-code-leaked-after-100m-hack-by-pro-israel-group

[un_rank]

Now we know how weak are the security in unpopular centralized exchanges.

My thoughts too and also for popular ones. If they are a target of a sophisticated enough hacking group any vulnerability they have will be exploited and you lose your funds. You should not have your coins in a platform you have no custody in and cannot determine the security level.

Services have been suspended in Nobitex. But they promised customers that operations would resume in five days, but the Internet challenges caused by the war might make their recovery longer.

I will be really surprised if they commence activities and allow users withdraw. The stolen funds are quite large and it will be difficult for the exchange to recover

- Jay -

[Kelward]

This is all link to what's happening between Israel and Iran recent fight but do we have to involved innocent businesses and peoples money.

-Not your keys, not your funds.

I dont know with the rules of war but this could be another tactics by the enemy of Iran, well target their plausible source fund in the matter. But honestly, does this means that attacking or stealing funds from their opponent is decent move when it comes to war? It might not be from Iran Government but the citizens of Iran also got affected by these war events.

If it's proven beyond reasonable doubts that the hack was Israel, related then I'd say that it's very unfortunate because innocent civilians have funds in that exchange. I don't know a country or their sympathizers that will target civilian assets to cripple their enemy's strength, I'm not in the military but I doubt that it's supposed to be in the rules of engagement.

Anyway the lesson for us crypto holders regarding leaving our coins in an exchange remains the same, they're not safe to hold our cryptocurrency. Hacks and bankruptcy is not a new development with exchanges, better to avoid any regrets by embracing self custody in a none custodial wallet. Not your keys not your coins.

[Charles-Tim]

If it's proven beyond reasonable doubts that the hack was Israel, related then I'd say that it's very unfortunate because innocent civilians have funds in that exchange. I don't know a country or their sympathizers that will target civilian assets to cripple their enemy's strength, I'm not in the military but I doubt that it's supposed to be in the rules of engagement.

It is worth knowing that the exchange customers do not suffer any loss and the exchange told its customers that they will continue to operate and that only little amount of money was stolen.

To people that are holding money on an exchange, it is highly wrong.

But about Iranians being the people that are suffering for it, that is how war is. Properties can be destroyed and lives can be lost. Anything bad can happen during war. We should not pray for one.

[tabas]

Anyway the lesson for us crypto holders regarding leaving our coins in an exchange remains the same, they're not safe to hold our cryptocurrency. Hacks and bankruptcy is not a new development with exchanges, better to avoid any regrets by embracing self custody in a none custodial wallet. Not your keys not your coins.

This should always be the lesson that no one should leave their funds on centralized exchanges. We'll never know how and when hackers will come to fetch their funds there. Despite that there are exchanges promising and guaranteeing that funds are safu, still, your only way to be safe is through making yourself safe by avoiding depositing that much on them.