Polylog
The Polylog Crypto Intelligence Brief

Morning Edition · Thursday, June 25, 2026

Wall Street Journal Ties $3.84 Billion in Iran Flows to Exchange CoinEx, Which Denies State Links

An investigation of public blockchain data identifies a single exchange as central to Iran's effort to move money around United States sanctions. The exchange says it has since tightened controls.

Wall Street Journal Ties $3.84 Billion in Iran Flows to Exchange CoinEx, Which Denies State Links

The Wall Street Journal reported that Iran-linked entities moved more than $3.84 billion through the cryptocurrency exchange CoinEx, citing analysis of public blockchain data by the intelligence firm TRM Labs. The reporting traces funds to wallets associated with Iran's central bank and the country's largest domestic exchange, Nobitex. It describes a pattern in which Nobitex served as the entry point inside Iran and CoinEx as the exit to global markets.

The account, summarized by crypto.news and circulated widely on social channels including Watcher Guru and the French-language Goku Crypto News, frames CoinEx as a destination that grew in importance precisely because enforcement tightened elsewhere. The Wall Street Journal noted that Binance had been Nobitex's largest foreign counterparty until United States authorities penalized it in 2023, after which CoinEx took that position by 2024.

CoinEx founder Haipo Yang told the Journal that Iranians used the exchange but denied any tie to the Iranian government. In its public response, CoinEx said it operates a transaction-monitoring system, screens high-risk users, and this month began blocking new signups from Iranian internet addresses. The report also said investigators linked some CoinEx-connected wallets to funds stolen from the exchange Bybit in an earlier theft attributed to North Korean operators, and to accounts United States officials associate with Iran's Revolutionary Guard.

For a sound-money reading, the episode shows the gap between the claim that public blockchains deter illicit finance and the on-chain reality that transparent ledgers can also document large sanctions-evasion flows after the fact. The same traceability that lets TRM Labs reconstruct the path does not stop the transfers while they happen. Who benefits if the claim holds matters here. United States authorities gain a case for extending enforcement to exchanges outside Western jurisdictions, while CoinEx and Iranian officials have an interest in disputing intent and attribution.

Veracity: Corroborated
82/100
If true, who benefits

United States enforcement gains a case to extend sanctions to offshore exchanges, while TRM Labs, whose business is sanctions forensics, gains validation for its surveillance tooling.

The nuance

The $3.84 billion flow is well documented on-chain across multiple outlets, but "Iran-linked" conflates state-directed evasion with ordinary Iranian users, and the United States sanctioned Nobitex, not CoinEx, leaving intent and direct government control unproven.

An open-source-intelligence read of how likely this story is true with its real nuance, not a judgment of any outlet. It assesses the claim, weighing independent and adversarial reporting. How we label confidence.

What this means

Sanctioned states continue to treat crypto networks as a settlement channel when banking access is cut, and Western regulators increasingly treat the exchanges handling that flow as the enforcement target. That raises compliance and delisting pressure on offshore venues and strengthens the case for surveillance tooling, even as it tests whether on-chain transparency is a deterrent or merely a forensic record.

What to watch

  • Whether the United States Treasury's Office of Foreign Assets Control names CoinEx or related wallets, which would convert a media investigation into formal enforcement.
  • Whether other large offshore exchanges restrict Iranian access pre-emptively, a sign that restrictions are spreading across the industry rather than affecting one venue.

Observations to monitor, not financial advice.

2 sources

Synthesized from: crypto.news · Polylog editors

Part of a tracked trend

Regulatory Perimeter for Crypto Hardens in EU and US

Over 3-6 months, enforcement deadlines and rulemaking debates narrow who can operate, with MiCA culling unlicensed EU firms and US regulators weighing durable rules over fragile exemptions.