Scale and Nature of Exposure
Published 6/25/2026, 5:07:56 AM
CoinEx’s $3.84 billion in Iranian blockchain-verified flows represents a material systemic Anti-Money Laundering (AML) risk. Research indicates that CoinEx has functioned as the primary global gateway for Iranian sanctions evasion since 2019, effectively replacing other major exchanges that tightened compliance controls [Source: https://www.trmlabs.com/resources/blog/how-coinex-became-irans-primary-gateway-to-global-cryptocurrency-markets].
Scale and Nature of Exposure
The $3.84 billion figure represents total blockchain-verified flows between CoinEx and sanctioned Iranian entities over a seven-year period (2019–2026) [Source: https://www.trmlabs.com/resources/blog/how-coinex-became-irans-primary-gateway-to-global-cryptocurrency-markets]. This exposure is characterized by high concentration and specific network usage:
- Primary Counterparty: CoinEx processed $763 million from Nobitex (Iran's largest exchange) in 2024 alone [Source: https://www.trmlabs.com/resources/blog/irans-crypto-economy-in-2025-declining-volumes-rising-tensions-and-shifting-trust].
- Network Concentration: Approximately $2 billion of this volume utilized the TRON network (TRC-20 USDT), favored for its lower fees and perceived lower surveillance [Source: https://www.trmlabs.com/resources/blog/how-coinex-became-irans-primary-gateway-to-global-cryptocurrency-markets].
- Market Shift: CoinEx became the dominant international exit for Iranian funds after Binance implemented stricter compliance measures in 2022 [Source: https://www.trmlabs.com/resources/blog/how-coinex-became-irans-primary-gateway-to-global-cryptocurrency-markets].
Direct Sanctions and Terrorist Financing Links
The risk is compounded by direct links to entities designated by the U.S. Treasury (OFAC) on June 2, 2026.
| Entity/Link | Impact & Evidence |
|---|---|
| Designated Exchanges | Nobitex, Wallex, Bitpin, and Ramzinex were sanctioned for assisting the Islamic Revolutionary Guard Corps (IRGC) [Source: https://home.treasury.gov/news/press-releases/sb0519]. |
| IRGC Integration | IRGC-linked wallet clusters accounted for over 50% of the total value received by the Iranian crypto ecosystem in Q4 2025 [Source: https://chainalysis.com/blog/iran-crypto-sanctions-2026]. |
| Terrorist Financing | Funds were traced from these networks to Gaza Now and Hezbollah-linked facilitators [Source: https://www.trmlabs.com/resources/blog/how-coinex-became-irans-primary-gateway-to-global-cryptocurrency-markets]. |
Systemic AML Risk Assessment
The risk is classified as systemic because CoinEx provided the necessary liquidity for a sanctioned state actor to maintain a "shadow crypto economy" estimated between $7.8 billion and $10 billion [Source: https://www.trmlabs.com/resources/blog/how-coinex-became-irans-primary-gateway-to-global-cryptocurrency-markets].
- Reactive Compliance: CoinEx only announced KYC tightening and Iranian IP blocking after the June 2026 OFAC designations [Source: https://www.trmlabs.com/resources/blog/how-coinex-became-irans-primary-gateway-to-global-cryptocurrency-markets].
- Secondary Sanctions Risk: Financial institutions interacting with CoinEx face legal liability under E.O. 13224 and E.O. 13902 [Source: https://home.treasury.gov/news/press-releases/sb0519].
- Broader Illicit Activity: Beyond Iran, CoinEx processed $1.5 billion in proceeds from the Bybit hack (linked to North Korean actors) in early 2025, suggesting a broader pattern of laundering high-risk funds [Source: https://www.reuters.com/business/finance/irans-surging-crypto-activity-draws-us-scrutiny-2026-02-03/].
Conclusion: CoinEx's $3.84 billion exposure is a systemic AML risk that has facilitated large-scale sanctions evasion and terrorist financing. While the exchange has recently moved to block Iranian IPs, its historical role as a primary liquidity ramp for the IRGC makes it a high-probability target for further regulatory enforcement. The distinction between total "flows" and "cash exposure" remains a technical nuance, but the legal risk to counterparties is identical.