Iranian authorities have imposed new restrictions on domestic cryptocurrency exchanges following a large-scale cyberattack on Nobitex, the country’s leading trading platform.
Under the new directive from the Central Bank, exchanges may now operate only between 10:00 a.m. and 8:00 p.m.
The move comes in the aftermath of a major security breach that resulted in the loss of over $90 million in digital assets from Nobitex. The attack was claimed by pro-Israeli hacker group Gonjeshke Darande—also known as Predatory Sparrow—who publicly took responsibility and threatened to leak the exchange’s internal data and source code.
Rather than redirecting the stolen assets for personal gain, the hackers reportedly “burned” the funds by sending them to inaccessible wallets, some of which carried anti-Iranian Revolutionary Guard messages. Cybersecurity analysts say the attack appears to have been politically motivated.
Blockchain firms Elliptic and Chainalysis both confirmed the destruction of the assets, linking the incident to a broader pattern of cyber offensives surfacing during periods of tension between Iran and Israel. Just a day before the Nobitex breach, the same hacker group targeted Iran’s Bank Sepah.
The newly imposed trading curfew underscores growing concerns within Iran’s financial system about digital asset security and the geopolitical consequences of cyberwarfare.
The U.S. Securities and Exchange Commission (SEC) has filed emergency enforcement actions against First Liberty Building & Loan, LLC and its founder, Edwin Brant Frost IV, alleging they operated a $140 million Ponzi scheme that spanned more than a decade and defrauded around 300 investors.
A legal clash between Coin Center and the U.S. Treasury Department over sanctions imposed on Tornado Cash has officially come to an end, following a joint decision to dismiss the case.
A sophisticated cyberattack targeting Brazil’s central bank reserve accounts has resulted in the theft of over $140 million (R$800 million), much of which was swiftly funneled through cryptocurrency channels.
A malicious open-source project on GitHub disguised as a Solana trading bot has compromised user wallets, according to a July 2, 2025, report by cybersecurity firm SlowMist.