News broke on June 19, 2025, that more than $90 million in cryptocurrency was destroyed in an attack on Iran’s Nobitex exchange by a hacktivist group called Predatory Sparrow. For many newcomers to cryptocurrency, headlines about exchange hacks can be alarming and confusing. What does this mean for your own crypto holdings? How can you stay safe? This guide breaks down what happened and provides practical steps anyone can follow to protect their digital assets, even during times of heightened geopolitical tension.
The Basics
Cryptocurrency exchanges are online platforms where people buy, sell, and store digital currencies like Bitcoin and Ethereum. Think of them as similar to a bank, but with important differences. When you keep money in a traditional bank, government deposit insurance typically protects your funds up to a certain amount. Cryptocurrency exchanges generally do not offer equivalent protections, which means that if an exchange is hacked or goes bankrupt, users may lose some or all of their funds.
The Nobitex attack was unusual because the hackers were not trying to steal money for themselves. Instead, they destroyed the cryptocurrency as part of a geopolitical conflict between Israel and Iran. This distinction matters because it means that even funds in so-called secure storage on the exchange were not safe from a determined attacker with political motivations.
Why It Matters
This incident matters for every cryptocurrency user, regardless of where they live or which platforms they use. It demonstrates that exchanges can be targeted not just by criminals seeking profit, but by groups with political or military agendas. With Bitcoin trading around $104,684 and Ethereum at $2,521 at the time of the attack, even a small percentage of holdings lost to an exchange failure can represent significant financial damage.
The attack also highlights a broader trend: cryptocurrency infrastructure is becoming entangled in international conflicts in ways that were difficult to predict just a few years ago. Users who assumed their choice of exchange was purely a business decision may now need to consider geopolitical factors when evaluating platform safety.
Getting Started Guide
The most important step you can take to protect your cryptocurrency is to move it off exchanges and into wallets you control. A cryptocurrency wallet is a tool that lets you manage your private keys, which are the cryptographic codes that prove ownership of your digital assets. When your crypto is on an exchange, the exchange holds your private keys, meaning you depend entirely on their security practices.
For beginners, a hardware wallet is the strongest option. These are physical devices, similar in appearance to a USB thumb drive, that store your private keys in a secure chip isolated from internet connections. Popular and reputable hardware wallet brands have been on the market for years and typically cost between $50 and $150. When you set up a hardware wallet, you will receive a seed phrase, which is a list of 12 to 24 words that can restore your wallet if the device is lost or damaged. Write this seed phrase down on paper or metal and store it in a secure location such as a home safe or bank deposit box. Never store your seed phrase digitally on a phone, computer, or cloud service.
Once your hardware wallet is set up, transfer your cryptocurrency from the exchange to an address generated by your wallet. Always send a small test transaction first to verify that the address is correct before transferring larger amounts. After the transfer is complete, verify the balance on a blockchain explorer by searching your wallet address.
Common Pitfalls
One of the most common mistakes beginners make is keeping all their cryptocurrency on an exchange for convenience. While exchanges make trading easy, they also create a single point of failure. If the exchange is hacked, goes bankrupt, or experiences technical problems, your funds could be inaccessible or lost entirely. The Nobitex users who lost $90 million had no way to recover their funds because the attack destroyed the tokens permanently.
Another pitfall is falling for phishing attacks that impersonate exchange support or wallet services. Attackers frequently send emails or messages claiming that your account has been compromised and asking you to click a link to verify your identity. These links lead to fake websites designed to steal your credentials. Legitimate platforms will never ask for your seed phrase or private keys through email or messaging apps.
Storing your seed phrase digitally is another dangerous mistake. Photos of your seed phrase on your phone, notes in cloud storage, or screenshots on your computer can all be accessed by malware or remote attackers. Your seed phrase should exist only in physical form in a secure location.
Next Steps
After setting up your hardware wallet and transferring your funds, establish a regular security review routine. Check your wallet balances periodically using a blockchain explorer rather than relying solely on wallet software. Keep your hardware wallet firmware updated by following the manufacturer’s official instructions. Consider setting up a second hardware wallet as a backup, stored in a different physical location, to protect against loss or damage.
Stay informed about security developments by following reputable cryptocurrency news sources and the official communications channels of the platforms you use. If an exchange you use announces a security incident, immediately assess your exposure and consider moving your funds to self-custody. The cryptocurrency space evolves rapidly, and security practices that were sufficient a year ago may need updating as new threats emerge.
Disclaimer: This article is for educational purposes only and does not constitute financial advice. Always conduct your own research and consult with a qualified professional before making financial decisions.
This is such a timely guide! I’ve been hearing so much about the Nobitex situation and it really highlights why we can’t just leave everything on exchanges. Definitely moving my main bags to cold storage tonight.
Honestly, if you’re still surprised by exchange hacks in 2026, you haven’t been paying attention. This article is great for beginners, but the real lesson is that ‘cyber conflict’ is the new normal. Get your keys off the grid or prepare for the worst.
RugPullSurvivor $90M destroyed not stolen. Predatory Sparrow burned it as a political statement. that changes the threat model entirely
exactly. this wasnt a theft for profit, it was a message. that threat model is way harder to defend against than your typical ransomware crew
the guide is solid for beginners but the geopolitical angle is what makes this different. predetary sparrow arent your typical exploiters looking for a payday
Great analysis on the geopolitical risks. Most people don’t realize how digital assets get caught in the crossfire during these regional tensions. Diversifying across different wallet types and jurisdictions seems like the only sane way forward right now.
David Wilson diversifying across jurisdictions matters. Iranian exchange users had zero recourse because the attack was state-adjacent
Scary stuff with Nobitex man, really makes you think about how fragile these platforms can be. Thanks for the tips on 2FA and hardware wallets, I definitely needed a refresher. Stay safe out there everyone, security should always be the top priority!