CoinEx's $3.84B Iran Tie: Compliance Risk for Crypto Exchanges

ViaBTC, the mining pool linked to CoinEx, is not off the hook either. TRM traced $154 million in transactions between ViaBTC and wallets connected to Iranian entities. Funds moved frequently from mining operations toward Iran. After a cyberattack hit Nobitex in 2025, previously dormant mining wallets woke up and sent $2.7 million to a fresh Nobitex wallet. ViaBTC's fingerprints were on those transfers.

The geopolitical context matters. When the U.S.-Iran-Israel conflict intensified in 2026, transaction behavior shifted. Transfer sizes grew. Larger individual transactions became more common. That pattern, where amounts increase under pressure rather than disappear, suggests whoever was using the network adapted rather than stopped.

After OFAC's sanctions landed, overall transaction volumes between CoinEx and Iranian entities did drop. Yet TRM flagged that private accounts could still be running activity that does not show up cleanly on public blockchains. The drop in visible volume probably does not tell the whole story.

CoinEx's exposure goes beyond Iran. TRM's report tied the exchange's blockchain activity to wallets connected to the IRGC, Palestinian Islamic Jihad, and Hezbollah, three entities under heavy international sanctions. The platform also came up in connection with the CoinEx hack itself, BlackSuit ransomware, and the Wasabi mixing service. Each of those links adds another layer of complication.

CoinEx pushed back. The exchange denied any direct relationship with the Iranian government or sanctioned groups and said that blockchain transactions on their own do not prove illegal conduct. That is technically true as a legal argument. Blockchain data shows movement, not intent. Yet TRM's report is not pointing at one or two transactions. It is pointing at seven years, more than 60 counterparties, and $3.84 billion.

The OFAC sanctions on Nobitex and BitPin are recent. Compliance teams at major exchanges are scrambling to map their own exposure. With private accounts potentially keeping some flows alive off the public ledger, regulators are well aware that sanctions alone do not fully seal the pipes.