Chainalysis Maps Iran Stablecoin Pipeline Behind $344M USDT Freeze

Key Takeaways:

• $344M USDT freeze exposed a multi-step crypto pipeline across Iran-linked networks.
• Chainalysis traced wallet activity tied to the Central Bank of Iran network.
• Stablecoins remain central to Iran-linked networks using brokers, DeFi, and intermediaries.

Iran-Linked Stablecoin Flows Come Under Sanctions Scrutiny

Sanctions enforcement tied to Iran’s crypto activity is intensifying after a major stablecoin freeze brought attention to how these networks route funds across brokers, intermediary wallets, and DeFi infrastructure. Chainalysis said in an April 27 blog post that a $344 million USDT seizure was analyzed within a broader flow of transactions involving brokers, intermediary wallets, and on-chain routing. The action coincided with the Office of Foreign Assets Control (OFAC) adding two Central Bank of Iran-linked crypto addresses to its sanctions list.

The two wallets were frozen on April 23 and later appeared in OFAC’s updated designations. Chainalysis tied the addresses to activity involving Iranian exchanges and intermediary wallets interacting with Central Bank of Iran-associated accounts. Their balances were consistent with the $344 million in USDT frozen through coordination between Tether and U.S. authorities. The blockchain analytics firm detailed:

The timing connects wallet freezes, intermediary routing and sanctions designations within the same enforcement picture.

Broker Networks, DeFi Routing and Strait of Hormuz Risks Expand Iran Crypto Exposure

Chainalysis also described earlier stablecoin activity tied to Iran-linked networks. In late 2025, sanctioned individual Babak Morteza Zanjani published leaked documents that included cryptocurrency addresses he claimed were tied to the Central Bank of Iran. The firm said those materials indicated that a broker helped the regime buy stablecoins with fiat currency. That broker had exposure to Alireza Derakhshan, who coordinated more than $100 million in crypto purchases linked to Iranian oil sales from 2023 to 2025. Chainalysis outlined a transaction flow where funds moved from brokers into stablecoins, through intermediary wallets, across bridges and DeFi protocols, before returning to Iranian crypto channels and Islamic Revolutionary Guard Corps (IRGC)-affiliated entities.

The analysis also points to fresh compliance risks around the Strait of Hormuz. Iran reported collecting toll payments from commercial vessels, while scammers allegedly targeted shipping firms trying to comply with those demands. Some companies paid fraudulent actors and were later confronted by IRGC naval vessels after Iranian authorities did not receive the funds. Payment methods remain under investigation, though Chainalysis said stablecoin use would fit recent Iranian on-chain activity if confirmed. Chainalysis noted:

The analysis shows how these transactions form a continuous, traceable pathway linking funding sources, routing layers, and sanctioned entities.