Iranian entities have funneled over $3.84 billion through the cryptocurrency exchange Coin Ex, according to blockchain analysis, making it a significant conduit for evading U.S. sanctions. The transactions included funds from a massive hack, where North Korean actors stole $1.5 billion from Bybit before routing money through Iranian wallets to the exchange.

Blockchain intelligence firm TRM Labs traced these flows, finding that Coin Ex wallets received hacked cryptocurrency from Iran's Central Bank and transacted with accounts linked to the country's Revolutionary Guard. The exchange, founded in 2017 by former Tencent engineer Haipo Yang from Hong Kong, now operates from Seychelles and has become increasingly central to Iran's cryptocurrency operations.

This development poses serious regulatory challenges for the digital asset industry. U.S. officials have long warned about cryptocurrency's potential for sanctions circumvention, and this case illustrates how exchanges can inadvertently facilitate illicit financial flows. The connection between state actors and hacked funds raises questions about compliance oversight.

Yang acknowledged Iranian usage in communications with The Wall Street Journal but denied any government relationship. Coin Ex recently began blocking Iranian IP addresses and implementing additional screening measures, though the damage from years of unmonitored transactions may already be done.