Nobitex, Iran's largest cryptocurrency change, confirmed no indicators of sustained user-driven operations after the US and Israeli assaults on Iran, regardless that blockchain knowledge confirmed a brief spike in exercise and elevated outflows from broader Iranian exchanges, based on separate analyzes by TRM Labs and Chainalysis.
The TRM report examined on-chain exercise round Nobitex following the US and Israeli assaults on Iran that started on February 28, and located that the platform recorded a big enhance in exercise instantly thereafter, together with greater than $35 million in transfers from scorching wallets to chilly storage. Nevertheless, TRM stated the switch was possible a part of the change's inner monetary operations.
“Based mostly on previous conduct and pockets attribution, these actions are in line with routine liquidity administration moderately than user-directed withdrawals,” the report stated.
Actions throughout Novitex. Supply: TRM
Nobitex is situated on the coronary heart of Iran's cryptocurrency ecosystem. TRM estimates that the change has processed tens of billions of {dollars} in commerce worth since 2019, together with greater than $5 billion in commerce worth from 2025 alone.
Associated: U.S. army makes use of Antropics in assault on Iran regardless of President Trump's ban: WSJ
Nobitex makes use of Bitcoin mining reserves to get well from hack
In June 2025, Nobitex suffered a cyberattack by the Israeli-affiliated hacker group Predatory Sparrow, leading to a hacking lack of $90 million. The breach uncovered particulars of Nobitex's inner structure, together with a multi-layered custody construction that separates scorching, heat, and chilly wallets, in addition to an automatic routing system designed to handle transactions throughout varied networks.
After the hack, Nobitex relied partly on reserves associated to its preliminary Bitcoin (BTC) mining actions to stabilize its operations. TRM revealed that roughly $2.7 million was consolidated from greater than 100 dormant mining-related wallets instantly after the incident, suggesting that the change mobilized unspent funds because it restored service.
Regardless of the operational disruption, Nobitex resumed its actions in a phased method within the second half of 2025.
Associated: 6 Polymarket merchants revenue $1 million from US and Iranian assaults, elevating insider issues: report
Cryptocurrency outflows from Iranian exchanges are quickly growing
In the meantime, a Chainalysis report revealed that roughly $10.3 million in digital property have been leaked from Iranian exchanges between February 28 and Monday. At one level, hourly outflows soared to a stage 873% increased than the 2026 common.
Iranian digital foreign money leak. Supply: Chainalysis
The report stated that whereas these transfers could point out that bizarre Iranians are self-storing funds to keep away from financial instability, they could additionally alter change liquidity or create new wallets to obscure exercise beneath sanctions strain. One other chance is that state-aligned actors are utilizing home exchanges to maneuver funds throughout borders.
journal: Bitcoin might take 7 years to improve to post-quantum — Co-author of BIP-360
