Nobitex review

Nobitex is Iran's largest and most widely used cryptocurrency exchange, operating as the primary on-ramp and trading venue for Iranian residents seeking exposure to digital assets. It facilitated trading in approximately 300 cryptocurrencies and accepted Iranian Rial deposits and withdrawals, making it the de facto platform for domestic crypto adoption in Iran. The exchange operated under an implicit understanding with Iranian authorities but held no formal international regulatory licence or external security certification. Trading fees were competitive at 0.1–0.2% for standard users, with no tiered premium membership structure. On 2 July 2026, Nobitex suffered a catastrophic security breach in which attackers (attributed by some sources to geopolitical actors with suspected Israeli connections) drained over $90 million in cryptocurrency holdings, including significant quantities of Bitcoin, Ethereum, and Dogecoin. The attackers simultaneously leaked Nobitex's complete source code and posted messages criticising Iran's Revolutionary Guard on blockchain addresses receiving the stolen funds. The exchange's website and mobile application were taken offline whilst management conducted a full security assessment. No public timeline for recovery was announced as of the incident date. Nobitex maintained no published insurance scheme, proof-of-reserves audit, or cold-storage custody protocol independent of internal management oversight. The breach exposed fundamental weaknesses in its security infrastructure and revealed a lack of industry-standard custodial segregation and multi-signature controls. International sanctions and geopolitical isolation have historically prevented Nobitex from engaging third-party security auditors or obtaining liability insurance from international providers, compounding custody risk. Users have no regulatory recourse for recovery of stolen funds. The exchange served a vital economic function in Iran as the only domestically available crypto trading platform, but the July 2026 breach has rendered it unsuitable for any user prioritising asset safety. Affected users have no legal remedy under Iranian or international law. The platform's recovery, operational timeline, and any customer compensation remain wholly unclear. Iranian residents seeking crypto exposure now face a complete absence of domestic infrastructure with even baseline security assurances.

Nobitex is lightly regulated or non-custodial. Major hack on 2 July 2026: attackers (linked to geopolitical actors) drained approximately $90 million in Bitcoin, Ethereum, Dogecoin and other assets, leaked source code, and forced site offline for security assessment. As with any platform, use strong security and only hold what you need on it.

Yes — identity verification (KYC) is required for most features.

Nobitex fees: maker 0.1%–0.2%, taker 0.1%–0.2%; withdrawals: Varies by asset. Always confirm current fees on the official site, as crypto fees change often.

No / restricted.

Not recommended for any user at this time following the major security incident..

Avoid Nobitex if: You have any concern whatsoever regarding custody security, regulatory stability, or asset recovery; the July 2026 breach makes this exchange unsuitable..

Pros: Only licensed cryptocurrency exchange operating in Iran, providing Iranian residents regulated on-ramp to crypto; Supports Iranian national currency (Iranian Rial) directly; Historically dominated Iranian crypto trading market with significant liquidity. Cons: Suffered a catastrophic $90 million security breach in July 2026, demonstrating critical infrastructure weaknesses; No customer fund insurance or recovery mechanism post-breach; International restrictions on Iran limit ability to obtain external security audits or institutional partnerships.

No / limited. See the official site for current licensing.

This review was last verified on 2026-07-05 against the official site.