TRM Labs Traces $3.84 Billion in CoinEx-Iran Flows; Exchange Denies

$3.84 billion in traced onchain flows between CoinEx and sanctioned Iranian crypto entities over seven years. TRM Labs published that number Wednesday, and CoinEx is calling it garbage.

CoinEx handled roughly $2.7 billion of that total with Nobitex, Iran's largest crypto exchange, and had direct transaction exposure to more than 60 Iranian crypto platforms. TRM says the pattern suggests a coordinated relationship, not random market activity. The U.S. Treasury sanctioned Nobitex, Wallex, Bitpin, and Ramzinex earlier this month.

Why TRM's numbers matter

TRM also flagged $6 million in transactions involving wallets tied to the Islamic Revolutionary Guard Corps and $374,000 linked to Palestinian Islamic Jihad. If accurate, this isn't just sanctions evasion by private actors; it's material support to designated terrorist entities. The scale alone should make compliance teams at every exchange with Iranian traffic re-evaluate their screening.

CoinEx, registered in Seychelles, fired back Thursday. It claims it "never established any commercial relationship with Iranian government-related entities, Iranian domestic exchanges," and never assisted the IRGC or other sanctioned parties. The exchange argues that blockchain tracing is inherently noisy: "The fact that funds have passed through a platform onchain does not mean that the platform was aware of, supported, or participated in the related fund activity."

The limits of onchain attribution

CoinEx has a point about false positives. TRM's methodology relies on clustering and heuristic link analysis; a single misattributed address can inflate numbers. But $3.84 billion is a lot of misattribution, and the concentration with Nobitex is hard to explain away as organic cross-platform churn. CoinEx says it has already begun reviewing and exiting all Iran-related exposure.

For technical readers: this is a stress test of blockchain analytics as enforcement evidence. Regulators will subpoena exchange KYC records. If onchain links match IP logs or withdrawal histories, the denial crumbles. If not, TRM's report becomes a costly distraction. Either way, the data is now public, and every exchange running a US-facing business should audit its Iranian traffic flows before the Treasury does it for them.

Source: CoinEx denies claims it served as $3.84 billion gateway to sanctioned Iranian crypto firms
Domain: coindesk.com