Iran State TV Hack and $90M Crypto Burn Explained | What It Means for Cybersecurity and Geopolitics

In June 2026, Iran faced two major cyberattacks within 48 hours. Its state television broadcast was hijacked mid-air to promote anti-government protests, and $90 million worth of cryptocurrency was stolen and permanently destroyed in a cyberattack on Nobitex, the country’s largest crypto exchange. Experts believe these attacks were politically motivated, possibly linked to escalating tensions with Israel. These incidents highlight the growing threat of cyber warfare, the importance of securing critical infrastructure, and the rising use of cryptocurrency as a weapon in international conflicts.

Jun 21, 2025 - 11:53
Updated: 1 month ago
102.6k
Iran State TV Hack and $90M Crypto Burn Explained | What It Means for Cybersecurity and Geopolitics

Quick answer: Two cyber incidents hit Iran days apart: a live state TV broadcast was hijacked, and about $90 million in cryptocurrency was moved from the Nobitex exchange to unusable burn wallets. The burn suggests a political message, not profit. Some reports link the attackers to Predatory Sparrow, a group tied to Israel.

Key takeaways

  • The incidents were reported days apart, but attribution of such events is often disputed.
  • Check original security researcher reports.
  • Do not assume a hack proves a particular government's action.

 What Really Happened?

In June 2025, two shocking cyber incidents hit Iran just days apart:

  1. Iran’s national TV channel was hacked during a live broadcast.

  2. $90 million worth of cryptocurrency was stolen and destroyed from Iran’s top crypto exchange.

These attacks happened during rising tensions in the Middle East, especially between Iran and Israel.

 TV Broadcast Hijacked: A Wake-Up Call

During a live TV program, viewers suddenly saw a strange message appear on their screens. The message supported protests and criticized the Iranian government. Officials quickly stopped the feed, but the damage was already done.

Experts say this was a “broadcast signal hijack”, hackers took control of the signal before it reached people’s TVs.

How did this happen?

  • Hackers may have accessed satellite uplinks or TV control systems.

  • They replaced the real content with their own message.

  • This kind of attack is rare and dangerous, it shows even national media is not fully secure.

 $90 Million Crypto Attack: More Than Theft

A day later, hackers attacked Nobitex, Iran’s largest crypto exchange.

Here’s what happened:

  • They moved around $90 million worth of cryptocurrency from Nobitex.

  • Instead of keeping it, they sent it to burn wallets, addresses that no one can access, not even the hackers.

  • This means the money is permanently gone.

Why would someone destroy the money?

  • Experts believe this wasn’t for profit.

  • It was likely a political message, showing power, making a statement, and damaging Iran’s economy.

 Is This Cyberwar?

Some reports link the hackers to Predatory Sparrow, a group believed to be tied to Israeli intelligence.

These incidents weren’t just random, they were highly organized, well-planned, and meant to embarrass and weaken Iran during a time of conflict.

This shows how cyber attacks are now part of modern warfare.

What Can We Learn?

These incidents teach us that:

  • No system is 100% secure, even national TV or financial exchanges.

  • Cybersecurity must be a top priority for governments and companies.

  • Crypto exchanges need to have stronger protection, like:

    • Cold wallets (offline)

    • Regular audits

    • AI-powered threat detection

Governments must also protect their media networks, using:

  • Encrypted communication

  • Physical access controls

  • 24/7 cyber monitoring

 Conclusion

In just 48 hours, Iran saw both its TV signals hijacked and millions in crypto wiped out.

This goes beyond Iran. It’s a reminder to every country and company:

  • Cyber attacks are faster, smarter, and more dangerous than ever.

  • Hackers can now destroy money, control what you see on TV, or shut down banks, all without firing a shot.

As cyber threats rise, the world must invest more in strong, smart, and simple cybersecurity solutions.

Related reading

Frequently Asked Questions

It was hacked during a live broadcast, showing protest messages against the government.

The group “Predatory Sparrow,” believed to have ties with Israeli intelligence.

It was a broadcast signal hijack, where the attacker replaces the real feed with their own.

It occurred in mid-June 2025.

$90 million worth of cryptocurrency was stolen and sent to burn wallets.

They are digital wallets that nobody can access. Any crypto sent there is lost forever.

Experts believe it was a political message, not an attempt to make money.

Yes, it’s a clear example of modern cyberwar tactics used during geopolitical tensions.

A hacker group known for advanced cyberattacks against Iranian targets.

Yes, blockchain records show the movement to non-recoverable addresses.

By compromising satellite links, studio systems, or distribution networks.

No, it’s rare and very difficult, indicating a highly skilled attack group.

Through vulnerabilities in their servers, wallets, and internal controls.

Use cold wallets, multi-factor authentication, regular audits, and AI monitoring.

No, they destroyed the funds, making it a symbolic, non-financial strike.

High sophistication, political motive, and no financial gain.

Because cyberattacks can affect media, finance, and government stability.

Yes, AI can automate and optimize attacks for maximum damage.

With confusion and concern, especially over the loss of funds and media control.

They escalate digital tensions between Iran and its rivals, especially Israel.

Using national CERTs, advanced monitoring tools, partnerships, and intelligence sharing.

Yes, those with accounts on Nobitex lost funds due to the hack.

No system is fully safe. Cybersecurity must be proactive and multilayered.

They have no known private key, so no one can retrieve the funds.

It’s a digital attack meant to cause damage, not steal data or money.

Yes, but attribution is difficult, especially across borders.

To send a message, disrupt systems, and create panic.

While details are unclear, Iran has increased digital monitoring and security.

Yes, any country with weak infrastructure or political conflict is at risk.

Investigate, improve defenses, inform users, and prevent future breaches.

What's Your Reaction?

Like Like 0
Dislike Dislike 0
Love Love 0
Funny Funny 0
Wow Wow 0
Sad Sad 0
Angry Angry 0
Vaishnavi

Vaishnavi is a skilled tech professional at the Ethical Hacking Training Institute in Pune, responsible for managing and optimizing the technical infrastructure that supports advanced cybersecurity education. With deep expertise in network security, backend operations, and system performance, she ensures that practical labs, online modules, and assessments run smoothly and securely. Her behind-the-scenes contributions play a vital role in delivering a seamless and secure learning experience for aspiring ethical hackers.