The central bank of Iran has reportedly imposed strict operating hours on its domestic crypto exchanges following a $100 million exploit on Nobitex by a pro-Israel hacker group.
In a blog post on Wednesday, Chainalysis cited reports saying domestic crypto exchanges in Iran are now limited to operating hours between 10 am and 8 pm.ย
Chainalysis’s head of national security intelligence, Andrew Fierman, told Cointelegraph the curfew is likely an attempt to stay on top of any further attacks, because โincidents are easier to triage if theyโre not happening in the middle of the night.โย
Nobitex was hacked on Wednesday morning, according to the exchange.ย
โSecondly, while the people of Iran leverage cryptocurrency exchanges to facilitate cross-border transactions, the Iranian regime may want to assert more control over their citizensโ transactions,โ he said.ย
โThis is especially the case during times where geopolitical tensions are high and capital flight from Iran is possible.โย
Iranโs central bank has imposed restrictions on exchanges before. In December, it ordered a temporary shutdown of all crypto exchanges to prevent its national currency, Rials, from being exchanged and depreciating further.ย
Israel launched multiple strikes inside Iran on June 13. The two countries have been trading blows ever since.ย
Nobitex hackers burned the stolen cryptoย
Nobitex was exploited for at least $100 million in assets based on current estimates, spanning a range of crypto, including Bitcoin (BTC), Ether (ETH), Dogecoin (DOGE), XRP (XRP) and Solana (SOL).ย
Pro-Israel hacker crew Gonjeshke Darande has claimed responsibility for the exploit after allegedly infiltrating Nobitexโs internal systems and draining its hot wallets.ย
The Chainalysis team said in the report that it appears the attacker-controlled wallets were burner addresses lacking private key access, โmaking them irretrievable.โย
โWhile hacks historically have almost always been for financial gain, this event stands out given the intent appears to have been politically motivated to take funds away from the regime,โ Fierman said.ย
Burning tokens means they are permanently removed from circulation. Generally, this is achieved by sending them to an inaccessible wallet address.ย
Nobitex says situation โunder controlโ
Following the hack, Nobitex severed all external access to its servers, the communication team said in a statement to X on Wednesday.ย
โAs part of Nobitexโs ongoing response to the recent security incident, we would like to inform our users that the situation is now under control,โ they said.ย
At the moment, user access is still unavailable, but the exchange said the Nobitex Reserve Fund will cover all assets lost in the hack.ย
The Nobitex technical team is also emptying the exchangeโs online hot wallets and sending them to offline cold storage devices to prevent further exploits and losses.ย
โIn addition, the internet disruptions and blocked access to external servers may result in a longer-than-usual timeline for restoring user access to the platform,โ the Nobitex communication team said.
Nobitex is a critical hub in Iranโs crypto ecosystemย
Chainalysis said it tracked Nobitexโs total inflows and found it has well over $11 billion, compared to just under $7.5 billion for the next ten largest Iranian exchanges combined.ย
It is the go-to platform for Iranian users seeking access to global crypto markets and is a central pillar of the countryโs digital asset ecosystem, according to Chainalysis.ย ย
Related: Bitcoin, crypto dip as Trump says Iranโs leader an โeasy targetโ
โNobitex isnโt just a local exchange; it serves as a critical hub within Iranโs heavily sanctioned crypto ecosystem, enabling access to global markets for users cut off from traditional finance,โ Chainalysis said.ย
The exchange also has links to a range of groups considered terrorists in the Western world, such as the Houthi rebels in Yemen, a pro-al-Qaeda propaganda channel, and sanctioned Russian crypto exchanges, Garantex and Bitpapa.ย
Magazine: Bitcoinโs invisible tug-of-war between suits and cypherpunks
