Back to dashboard
Wednesday, June 18, 2025 at 03:00 UTC

Nobitex

Politically motivated burn of Iranian exchange reserves.

Lost
Funds stolen
$81.00M
Recovered
$0.00M0%
Still outstanding
$81.00M
Chain
Bitcoin
Category
CEX
Attack vector
Private Key Compromise
Reported by
SlowMist
Incident ID
h2025-3

Exploit & recovery timeline

  1. Jun 18, 2025 · 01:00 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the private key compromise exploit against Nobitex.

  2. Jun 18, 2025 · 03:00 UTC
    Exploit executed

    $81.0M drained from Nobitex on Bitcoin via Private Key Compromise.

  3. Jun 18, 2025 · 04:00 UTC
    Detected by SlowMist

    SlowMist flagged the anomalous transactions and published an initial alert.

  4. Jun 18, 2025 · 07:00 UTC
    Protocol response

    Nobitex paused affected contracts or withdrawals and began tracing outbound flows.

  5. Jun 19, 2025 · 03:00 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. Jul 18, 2025 · 03:00 UTC
    Funds written off

    No assets recovered; losses absorbed by the protocol, insurers, or users.