


Perceptive Security
SOC/SIEM Consultancy

The U.S. sanctions Nobitex crypto exchange used by ransomware
Published:
3 June 2026 at 20:31:22
Alert date:
3 June 2026 at 21:02:42
Source:
bleepingcomputer.com
Ransomware & Malware, Critical Infrastructure, Data Breach & Exfiltration
The U.S. Treasury's Office of Foreign Assets Control (OFAC) announced sanctions against Nobitex, Iran's largest cryptocurrency exchange, for facilitating payments related to terrorist activities and ransomware operations. The sanctions target the exchange's role in enabling illicit financial transactions and supporting malicious cyber activities. This action represents a significant enforcement measure against cryptocurrency platforms that facilitate criminal activities.
Technical details
U.S. Treasury's OFAC sanctioned Nobitex, Iran's largest cryptocurrency exchange, for facilitating payments related to terrorist activities and helping evade economic sanctions. Nobitex processed more than 50% of all Iranian digital asset inflows in 2025 and facilitated transactions linked to the Islamic Revolutionary Guard Corps (IRGC), including IRGC-affiliated ransomware actors. The exchange helped the Central Bank of Iran access hundreds of millions of dollars in stablecoins to prop up the Iranian rial. The Iranian crypto ecosystem received nearly $7.8 billion in 2025, with IRGC-associated addresses accounting for over 50% of value received in Q4 2025. Sanctions also targeted three other Iranian exchanges: Wallex (12% of inflows), Bitpin (10% of inflows), and Ramzinex.
Mitigation steps:
U.S. persons are prohibited from doing any business with the sanctioned entities and individuals. Any property or assets of the designated entities and individuals under U.S. jurisdiction are frozen. International companies should exercise caution when dealing with sanctioned Iranian cryptocurrency exchanges to avoid regulatory risks.
Affected products:
Nobitex cryptocurrency exchange
Wallex cryptocurrency exchange
Bitpin cryptocurrency exchange
Ramzinex cryptocurrency exchange
Related links:
http://home.treasury.gov/news/press-releases/sb0519
https://ofac.treasury.gov/recent-actions/20260602
https://www.chainalysis.com/blog/ofac-sanctions-iranian-crypto-exchanges-june-2026/
https://www.bleepingcomputer.com/news/security/pro-israel-hackers-hit-irans-nobitex-exchange-burn-90m-in-crypto/
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
