TRM Labs traced more than USD 3.84 billion in blockchain-verified flows between CoinEx and sanctioned Iranian entities over seven years — spanning 50+ platforms, with exposure to Nobitex, the IRGC, Palestinian Islamic Jihad, and Hezbollah.
CoinEx was Nobitex's single largest external counterparty by 2025, by nearly nine times over the next largest named exchange. Every major Iranian exchange routes approximately 5–10% of its volume through CoinEx — a statistical clustering inconsistent with independent market behavior. TRM also traced USD 67 million in Central Bank of Iran funds through CoinEx infrastructure, and identified CoinEx's affiliated mining pool, ViaBTC, as a liquidity recovery mechanism for Nobitex following a 2025 cyber attack.
🔗 Read TRM’s full analysis: