NextFin News - In the chaotic 48 hours following the joint U.S.-Israeli airstrikes on Iran that began on February 28, a digital exodus of capital signaled a profound shift in how the Islamic Republic manages its survival. Data from blockchain analytics firm Chainalysis reveals that more than $10 million in cryptocurrency surged out of Iranian exchanges in that window, with nearly a third of those funds landing in foreign digital wallets by March 5. While some of this movement reflects a panicked civilian population seeking a haven from a collapsing rial, the scale and destination of the transfers point to a more institutional architect: the Islamic Revolutionary Guard Corps (IRGC).
The IRGC, which U.S. President Trump has targeted with renewed "maximum pressure" sanctions since his inauguration in 2025, has effectively constructed a "shadow banking" system that operates beyond the reach of the SWIFT network. According to Kaitlin Martin, a senior intelligence analyst at Chainalysis, addresses directly linked to the IRGC accounted for over half of all value received by Iranian entities in the final quarter of 2025. This activity involved moving more than $3 billion to support regional militia networks, facilitate illicit oil sales, and procure dual-use equipment necessary for the regime’s military industrial complex.
Martin, whose work at Chainalysis focuses on tracking state-sponsored illicit finance, has long maintained that Iran’s crypto ecosystem is one of the most sophisticated in the world. Her analysis suggests that the IRGC’s grip on the domestic economy allows it to leverage platforms like Nobitex, Iran’s largest cryptocurrency exchange, as a strategic tool. Even during state-mandated internet blackouts designed to quell domestic unrest, blockchain data shows continued outflows from these exchanges, implying that regime actors maintain dedicated, high-level access to digital asset holdings when the rest of the country is offline.
The mechanics of this evasion rely heavily on "stablecoins"—digital assets pegged to the value of the U.S. dollar or other major currencies to avoid the volatility of Bitcoin. A particularly potent tool in this arsenal is the A7A5 stablecoin, a ruble-backed asset that has processed more than $93 billion in transactions in less than a year. This specific token network functions as a purpose-built settlement rail for sanctioned actors, allowing the IRGC to fund a web of regional proxies including Hezbollah in Lebanon, Hamas, and the Houthi rebels in Yemen. U.S. authorities have recently identified several Houthi-linked wallets that were replenished via these Iranian-controlled digital channels to facilitate the purchase of drones and ballistic missile components.
However, the reliance on digital assets is not without significant risk. In June 2025, during a previous peak in regional tensions, the Nobitex exchange suffered a devastating cyberattack that resulted in the theft of $90 million. Blockchain security firm TRM Labs attributed the breach to hackers linked to Israeli intelligence. This vulnerability highlights a central tension in the IRGC’s strategy: while blockchain technology offers a way to bypass traditional banking sanctions, the transparency of the ledger allows Western intelligence agencies to map the regime’s financial networks with unprecedented precision.
From a broader market perspective, the IRGC’s activities represent a specialized use case that does not necessarily reflect the behavior of the global cryptocurrency market. Craig Timm, an anti-money laundering expert at ACAMS, notes that while the IRGC uses stablecoins for statecraft, the Iranian civilian population uses Bitcoin as a "lifeline" against 50% inflation. This dual-track economy creates a complex regulatory environment where sanctioning the regime’s wallets often risks cutting off the only financial escape hatch available to ordinary Iranians. The ongoing conflict has only accelerated this trend, turning the blockchain into a primary theater of the economic war between Washington and Tehran.
Explore more exclusive insights at nextfin.ai.
