18 Jun 2025 (widely reported disclosure day)
Nobitex: Unauthorized Access to Infrastructure and Hot Wallets
Nobitex: in Jun 2025 it reported unauthorized access to part of its infrastructure and hot wallets, suspended access, and said most user assets were in cold storage. Gonjeshke Darande claimed responsibility.
- Event date
- Incident typeExchange hot-wallet incident
- Bug classNot yet published
- Published
Loss, as sourced
Nobitex's incident statements describe unauthorized access and a pledge to compensate via insurance/resources. Secondary outlets commonly cite ~$90M destroyed/drained; that figure is not taken from Nobitex's own wording here.
Traceability
Primary sources
In brief
Root cause: Not fully published. Nobitex confirms unauthorized access to part of infrastructure and hot wallets. Claim of responsibility by Gonjeshke Darande (Predatory Sparrow) is from the claimants, not Nobitex.
Timeline, as sourced: Per reporting and Nobitex statements: mid-Jun 2025 detection; platform access restricted; investigation ongoing.
Account, as sourced
Claimed (Nobitex) (statement (opens in a new tab)): most assets in cold storage; compensation via insurance fund and resources.
Unknown: Nobitex's own loss total and technical vector.
Summaries of public sources as of the published date; except where marked (on-chain), not independently verified by NullMeridian. Figures are the sources’ own and are attributed; where sources disagree, each is given. Sources may since have changed. Not legal, financial or investment advice.
Permalinkhttps://andromeda.observer/e/nobitex-hot-wallet-2025