TLDR
A new sanctions-focused report says Iran-linked entities routed about $3.8 billion in crypto through the centralized exchange CoinEx since 2019.
- TRM Labs traced $3.84 billion in flows from more than 60 Iranian entities, largely via domestic exchange Nobitex, into CoinEx.
- The flows appear to form a structured sanctions-evasion pipeline, but CoinEx strongly denies knowingly serving sanctioned actors or having formal Iran relationships.
- Expect intensified regulatory scrutiny of mid tier offshore exchanges and wider pressure for stronger sanctions screening and on chain monitoring across crypto venues.
Deep Dive
1. What The Report Actually Found
Blockchain analytics firm TRM Labs and related coverage report that wallets linked to around 60 sanctioned Iranian entities moved more than $3.84 billion through CoinEx since 2019, with about $2.7 billion flowing specifically between CoinEx and Nobitex, Irans largest domestic crypto exchange, at roughly $1 million per day since 2018. CoinEx is described as Nobitexs primary external counterparty and a major route for Iran-linked capital into global markets, including access to dollar-pegged stablecoins and broader liquidity. Some flows are tied to Central Bank of Iran wallets and to funds from the $1.5 billion Bybit hack attributed to North Korean actors, according to TRM-linked coverage.
The headline figure is not one big transaction, but years of repeated routing between Iranian infrastructure and one centralized exchange that appears to function as an international bridge.
2. CoinExs Response And Compliance Narrative
CoinEx has issued a detailed rebuttal, stating it has never had commercial relationships with the Iranian government, domestic exchanges, Revolutionary Guard related entities, or other sanctioned parties, and noting that its domain has been blocked in Iran since 2021. The exchange argues that open on chain fund flows do not prove knowledge or intent, and that aggregating two way flows into one large number can be misleading. At the same time, CoinEx says it has tightened geo fencing, sanctions screening, KYT (know-your-transaction) monitoring, and Iran related reviews after recent U.S. Treasury actions against Iranian exchanges like Nobitex, Wallex, Bitpin, and Ramzinex.
Regulators and analytics firms are treating on chain patterns themselves as evidence, while exchanges stress that flows can occur without explicit intent, creating a gray area around liability.
3. Broader Sanctions And Exchange Risk
The report lands amid a wider U.S. campaign that has already sanctioned several Iranian exchanges and seized or frozen over $1 billion in Iran-linked crypto. TRM Labs estimates CoinExs share of illicit transactions near 8 percent, far above typical compliant exchanges, which raises questions about its risk controls even though it has not been sanctioned so far. For other exchanges, the case illustrates that mid tier, offshore platforms can become preferred routes once larger venues tighten sanctions compliance, and that mining pools, stablecoins, and cross-chain bridges are all part of the enforcement picture.
Users and institutions that rely on less regulated exchanges face growing regulatory and reputational risk; exchanges with strong analytics and sanctions controls may gain an advantage as scrutiny increases.
Conclusion
The reported $3.8 billion in Iran-linked flows through CoinEx reflects how sanctioned economies can use crypto rails and smaller centralized exchanges to reach global liquidity. Whether CoinEx faces direct enforcement or not, the episode is likely to accelerate a shift where on chain analytics, sanctions screening, and jurisdictional risk management become core differentiators for exchanges and a key factor for crypto users to monitor.
CoinsKid.Com