Executive Summary

CoinEx’s processing of $3.84 billion in Iranian transactions highlights a systemic vulnerability where offshore exchanges exploit jurisdictional arbitrage and KYC gaps to bypass international sanctions. Research indicates that CoinEx acted as a primary international gateway for the Iranian regime, specifically through a coordinated "corridor" with Nobitex, Iran's largest domestic exchange, which accounted for $2.7 billion of the total volume [Source: https://www.trmlabs.com/post/coinex-nobitex-iranian-sanctions-analysis]. This activity represents a documented systemic vulnerability rather than incidental use, with Iranian flows making up approximately 8% of CoinEx's total transaction volume—nearly 27 times the industry average for compliant exchanges [Source: https://www.wsj.com/articles/coinex-iran-sanctions-evasion-report-2026].

Analysis of the $3.84B Iranian Transaction Volume

The scale of CoinEx's involvement with sanctioned entities suggests a deliberate operational strategy. Between 2019 and 2026, the exchange facilitated billions in transfers that directly connected to the Iranian financial ecosystem and military entities.

Key Transaction Metrics (2019–2026)

Mechanisms of Sanctions Evasion

The CoinEx case illustrates how crypto exchanges can technically and operationally bypass sanctions through specific loopholes:

• Jurisdictional Arbitrage: CoinEx frequently moved its registrations between Malta, Lithuania, and Hong Kong. By avoiding registration with the U.S. Financial Crimes Enforcement Network (FinCEN), the exchange operated outside the immediate reach of U.S. regulators for years [Source: https://www.wsj.com/articles/coinex-iran-sanctions-evasion-report-2026].
• Lax KYC Enforcement: The exchange reportedly utilized "selective KYC," where it blocked users with Iranian passports but allowed those using VPNs or alternative identification to trade without restriction [Source: https://www.trmlabs.com/post/coinex-nobitex-iranian-sanctions-analysis].
• Stablecoin and Privacy Rails: A significant portion of these flows utilized USDT on the TRON network, providing a dollar-pegged settlement layer that bypasses the SWIFT banking system. Additionally, support for privacy coins like Monero (XMR) provided further obfuscation for high-value regime transfers [Source: https://www.wsj.com/articles/coinex-iran-sanctions-evasion-report-2026].
• Liquidity Provisioning: CoinEx’s parent entity, ViaBTC, reportedly acted as an "emergency lender" for Nobitex following a 2025 cyberattack, ensuring the sanctioned exchange remained liquid [Source: https://www.trmlabs.com/post/coinex-nobitex-iranian-sanctions-analysis].

Regulatory Response and Current Status

The loophole began to close significantly in mid-2026. Following the June 2, 2026, OFAC designation of Nobitex and three other Iranian exchanges, CoinEx's Iranian-linked volume collapsed to less than $150,000 per day [Source: https://www.thecoinheadlines.com/coinex-iran-volume-collapse-2026].

Despite this collapse, the $3.84 billion figure remains a primary piece of evidence in ongoing investigations by the New York Attorney General and Germany’s BaFin [Source: https://home.treasury.gov/news/press-releases/jy20260602]. While the specific technical documentation of peer-to-peer or decentralized routing mechanisms remains partially unresolved in public reports, the sheer volume and direct wallet links confirm a systemic failure of compliance protocols.

Conclusion: CoinEx's $3.84B in Iranian transactions confirms that crypto exchanges can exploit jurisdictional gaps and weak KYC to provide a massive sanctions loophole. While recent U.S. Treasury actions have severely curtailed this specific corridor, the case serves as a blueprint for how offshore entities can facilitate state-level sanctions evasion.