Nobitex Exchange, the largest Iranian cryptocurrency platform, began to restore portfolio access to users following a major feat that led to more than $ 90 million losses.
The company published an update on June 29 via X, describing a progressive recovery process from verified users. According to the declaration, only the portfolios are initially unlocked, with other types of wallets to follow once the identity verification is complete.
Users are invited to wait for confirmation before trying to access their sales, which will be gradually displayed as the security checks take place.
“Once the accuracy and security of all the information was confirmed, Nobitex will start to display the portfolio sales in phases,” wrote the exchange. Nobitex expects the process to end in the middle of the week, but noted that deadlines could move depending on technical and security considerations.
The feat, carried out on June 18, was claimed by Gonjeshke Darande, a pro-Israeli group also known as the predator Sparrow. Blockchain investigators say that around 90 to 100 million dollars in digital active ingredients were drained with hot wallets through Ethereum (ETH) and Tron (TRX), including Bitcoin (BTC), ETH and Dogecoin (DOGE).
As part of its post-attack response, Nobitex Migre to a new portfolio system. The company warned users not to deposit funds in previously used addresses, noting that the deposits of the old wallets can cause permanent loss.
“If your old deposit address is connected to a mining or registered platform as a default withdrawal in a blockchain service, be sure to delete it,” said the update, highlighting the risk of sending funds to non-valid portfolios.
The pirates would have accessed the platform using the identification information for employees compromised earlier via infostealer malware. The violation exposed the parts of the internal Nobitex systems, including the source code and the server data, which were then disclosed online.
NOBITEX, who has treated more than $ 11 billion in entries to date, has a dominant position among Iran -based exchanges. Chainalysis previously linked it to illegal activities by groups of ransomware affiliated with the body of the Iranian Islamic Revolutionary Guard and sanctioned the Russian entities.
With users’ access to resume and exchange features that are always deactivated, the exchange works to stabilize operations and restore confidence. “We work to take over the withdrawal, deposit and trading services against verified users with minimal delay,” said the Stock Exchange.
The complete functionality of the platform should return in the coming days, although Nobitex has warned that the calendar could be revised according to the results of the current system controls.
