CoinEx Moved $3.8B for Iran-Linked Entities, TRM Says
TRM Labs alleges CoinEx channeled $3.84B from Iranian entities since 2019, with $2.7B tied to Nobitex, showing coordinated patterns. CoinEx denies involvement. US recently sanctioned Iranian exchanges and seized $1B in related crypto. The findings spotlight crypto's role in sanctions evasion.
Quick Take
TRM Labs: $3.84B moved through CoinEx by Iran-linked wallets since 2019
$2.7B flowed between CoinEx and Nobitex, Iran's largest exchange
CoinEx denies knowledge/participation, disputes on-chain data interpretation
US Treasury sanctioned 4 Iranian exchanges and seized $1B in crypto
Market Impact Analysis
BearishIncreased regulatory scrutiny on crypto exchanges for sanctions compliance may lead to enforcement actions, reducing trust and liquidity in certain platforms, and potentially affecting broader crypto market sentiment.
Speculation Analysis
Key Takeaways
- TRM Labs identified $3.84B moved through CoinEx by Iran-linked wallets since 2019, with $2.7B tied to Nobitex.
- CoinEx’s share of illicit volume reached nearly 8%, far exceeding the 0.3% threshold common among compliant exchanges.
- The exchange denies all wrongdoing, arguing on-chain flows don’t prove knowledge of illicit activity.
- US Treasury sanctioned Iranian exchanges and seized $1B in crypto, signaling a wider crackdown.
What Happened
Blockchain analytics firm TRM Labs dropped a report alleging that CoinEx has been a primary channel for Iranian entities to move billions in crypto since 2019. Wallets linked to sanctioned Iranian platforms — including Nobitex, Iran’s largest exchange — funneled an estimated $3.84 billion through CoinEx. The patterns, TRM said, exhibit coordination inconsistent with independent market behavior. CoinEx immediately pushed back, denying any commercial ties to Iranian exchanges or the government, and disputing the on-chain interpretation. The dispute lands as the US Treasury escalates its “Economic Fury” campaign, having already sanctioned four Iranian crypto exchanges and seized $1 billion in related digital assets.
The Numbers
The $2.7 billion moving between CoinEx and Nobitex averaged roughly $1 million daily. By 2024, CoinEx became Nobitex’s largest external counterpart, nearly nine times larger than the next exchange. TRM Labs flags that CoinEx’s illicit transaction volume share hit nearly 8%, dwarfing the 0.3% norm at compliant venues. Additionally, the CoinEx-linked mining pool ViaBTC accounted for $154 million in traced exposure to Nobitex through mining payouts, and it supplied emergency liquidity after Nobitex’s $90 million hack in June 2025. Iran’s domestic exchanges route 5–10% of their volume through CoinEx, suggesting a coordinated arrangement.
Why It Happened
Iran has increasingly turned to crypto to circumvent US economic sanctions, building a “digital dollar pipeline” through domestic exchanges like Nobitex, which controls half the country’s trading volume. TRM Labs’ findings indicate that CoinEx, whether wittingly or not, became a key offshore conduit. Lax sanctions compliance at some exchanges allows such flows to persist, even as Treasury actions ramp up. The data points to a systemic failure in detecting and blocking transactions tied to designated entities, raising questions about the effectiveness of existing AML/KYC controls in the crypto sector.
Broader Impact
The report intensifies regulatory scrutiny on exchanges with outsized exposure to sanctioned jurisdictions. If CoinEx faces enforcement action, it could set a precedent for other platforms, chilling liquidity for high-risk counterparties. The incident underscores crypto’s dual-use nature — both a tool for financial freedom and a sanctions-evasion vector. With $1 billion already seized, Washington is signaling zero tolerance, likely prompting exchanges to tighten compliance or risk exclusion from the global financial system.
What to Watch Next
- Whether the US Treasury or OFAC directly sanctions CoinEx or associated entities like ViaBTC.
- Potential regulatory ripple effects: other exchanges with similar exposure may accelerate compliance upgrades or delist Iranian-linked assets.
- Iran’s response and adaptation — will it shift to new underground channels, or face reduced crypto access?
This article is for informational purposes only and does not constitute financial advice.
Always late to trends?
Join for the latest news, insights & more.
Disclaimer: Bytewit is an independent media outlet that delivers news, research, and data.
© 2026 Bytewit. All Rights Reserved. This article is for informational purposes only.