Iran: Crypto Outflows Surge 700% After US-Israel Airstrikes — On-Chain Data Reveals the Scale
📋 En bref (TL;DR)
- 700% surge: Crypto outflows from Iranian exchanges exploded within 48 hours of US-Israeli airstrikes, according to Chainalysis data.
- $10.3 million withdrawn in two days, with hourly peaks reaching $2-3M/hour from Nobitex, Iran’s largest exchange.
- Three hypotheses: retail hedging, exchange obfuscation, or flows linked to the Iranian state and the Islamic Revolutionary Guard Corps (IRGC).
- A massive ecosystem: Iran accounts for $7.78 billion in crypto, with 13.5% of the population using digital assets.
- Historical precedent: this pattern repeats with every geopolitical escalation — Kerman bombings, missile strikes, civil protests.
When the first US-Israeli airstrikes hit Iranian soil, the screens of Tehran’s crypto traders began flashing in an entirely different way. Within 48 hours, outflows from Iranian centralized exchanges surged by 700%, a figure that surpasses anything on-chain analysts had previously observed. Behind these digital capital movements lies a complex reality, at the intersection of geopolitics, economic survival, and decentralized finance.
The data compiled by Chainalysis and Elliptic paints a striking picture: $10.3 million in cryptocurrency left Iranian platforms in just two days, with withdrawal peaks reaching $2 to $3 million per hour. To grasp the scale of the phenomenon, one must delve into the mechanics of an Iranian crypto ecosystem now worth $7.78 billion — one that serves both as a lifeline for ordinary citizens and an opaque channel for state actors.
The numbers: an unprecedented explosion of outflows
The first alerts appeared on Chainalysis dashboards less than six hours after the strikes began. Nobitex, Iran’s largest cryptocurrency exchange — claiming between 11 and 15 million users — recorded massive, simultaneous withdrawals. According to on-chain data, outflow volumes increased eightfold compared to the daily average of preceding weeks.
In raw numbers, $10.3 million transited out of Iranian exchanges within 48 hours. While this amount may seem modest compared to Western market volumes, it takes on considerable significance relative to the Iranian economy, where the rial has lost 96% of its value against the dollar over two decades and inflation fluctuates between 40 and 50% annually. For millions of Iranians, every dollar converted into a stablecoin or USDT represents insurance against monetary collapse.
The most intense hourly peaks — between $2 and $3 million per hour — coincided with moments of maximum tension, when Iranian news channels confirmed new waves of strikes. Tom Robinson, co-founder of Elliptic, commented: “What we’re observing is not a classic panic movement. The speed and coordination of withdrawals suggest prepared actors, likely a mix of informed individuals and more structured entities.”
Nobitex at the center of the storm
Nobitex holds a central position in the Iranian crypto ecosystem. With its 11 to 15 million declared users, the platform handles the majority of exchanges between the Iranian rial (toman) and cryptocurrencies. It is through Nobitex that conversions to USDT — the dollar-pegged stablecoin that serves as a safe haven currency for Iranians seeking to protect their savings — are processed.
Faced with the massive influx of withdrawal requests, Nobitex made a radical decision: temporarily suspending the USDT/Toman pair. This measure, officially justified by “exceptional market conditions,” triggered a wave of anxiety among users. On Iranian social media, screenshots showing 504 errors across several exchanges circulated widely, fueling fears of an asset freeze.
Several other Iranian platforms also experienced service interruptions, their servers unable to handle the volume of simultaneous requests. This saturation phenomenon is significant: it reveals the fragility of an infrastructure built under the weight of international sanctions, with limited technological resources and internet connectivity often degraded by the authorities themselves.
Three hypotheses to explain the flows
Analysts at Chainalysis and Elliptic identified three non-exclusive scenarios to explain this explosion in outflows. Each illuminates a different facet of the Iranian crypto ecosystem.
1. Retail hedging
The most intuitive hypothesis is a rush toward self-custody. Confronted with geopolitical uncertainty and the fear of account freezes on exchanges, millions of Iranians simultaneously decided to transfer their assets to personal wallets. This behavior is rational in a context where 13.5% of the Iranian population already uses cryptocurrencies — one of the highest adoption rates in the world.
With the rial having lost 96% of its value, trust in the national banking system is at an all-time low. For an Iranian wage earner, converting savings into USDT and then transferring them to a non-custodial wallet represents the digital equivalent of hiding dollar bills under a mattress — but with incomparable portability and discretion.
2. Exchange obfuscation
The second hypothesis is more technical. Some Iranian exchanges, aware of increased scrutiny from international regulators during conflict, may have deliberately moved their reserves to less traceable addresses. This obfuscation process aims to blur the trails and complicate the work of on-chain analysis firms like Chainalysis.
In this scenario, a portion of the $10.3 million would not represent genuine user withdrawals but rather internal platform movements, redistributing funds across different wallets to reduce their exposure to blockchain surveillance tools. This practice, well documented in the industry, is particularly prevalent among exchanges operating under sanctions regimes.
3. Flows linked to the state and the Revolutionary Guard
The third hypothesis is the most politically sensitive. According to Chainalysis data, more than 50% of inflows to Iranian exchanges in Q4 2025 had direct or indirect connections to the Islamic Revolutionary Guard Corps (IRGC). This finding raises the possibility that some of the observed fund movements are linked to state operations — financing allied militias, circumventing sanctions, or logistical preparation.
Tom Robinson of Elliptic specified in a blog post: “We cannot state with certainty what proportion of these flows is state-originated. But the volume, speed, and timing are consistent with coordinated movements that go beyond simple individual hedging.”
A historical pattern repeating itself
The explosion of crypto flows during the 2026 strikes is not an isolated case. On-chain data reveals a recurring pattern: every major geopolitical escalation in Iran is accompanied by a significant spike in cryptocurrency movements.
In January 2024, during the Kerman bombings that killed more than 80 people, outflows from Iranian exchanges had already experienced a notable spike, though of lesser magnitude than what is observed today. In October 2024, Iranian missile strikes against Israel generated a similar movement, this time more oriented toward Bitcoin purchases as a safe haven. In December 2025, during the wave of civil protests that shook several Iranian cities, on-chain transaction volumes had increased by 300%, with protesters using cryptocurrencies to fund their activities beyond the authorities’ gaze.
This pattern confirms the structural role of cryptocurrencies in the Iranian economy: they are no longer a marginal speculative tool, but a financial survival mechanism for a population caught between international sanctions and their own government’s disastrous economic management.
Iran, a crypto giant under sanctions
To understand the scale of the observed flows, Iran must be placed in the global crypto landscape. With an ecosystem estimated at $7.78 billion and an adoption rate of 13.5% of the population, the country ranks among the most dynamic crypto markets in the world — a cruel irony for a state subject to some of the strictest financial sanctions ever imposed.
The massive adoption of cryptocurrencies in Iran is a direct product of the rial’s collapse. With chronic inflation fluctuating between 40 and 50% per year, the national currency has lost most of its purchasing power. Iranians turned to the dollar, then to gold, and finally to stablecoins — particularly Tether’s USDT — as value preservation instruments. Bitcoin, meanwhile, serves more as a long-term investment vehicle for those who can afford its volatility.
This reality creates a permanent paradox for international regulators. The same tools that allow Iranian citizens to protect their savings also serve the regime to circumvent sanctions. As the Chainalysis blog noted: “The blockchain does not distinguish between a father in Tehran buying $200 of USDT to protect his savings and an IRGC intermediary moving millions to fund regional operations.”
Bitcoin: genuine refuge or crisis narrative?
The Iranian events reignite a fundamental debate in the crypto universe: is Bitcoin truly a safe-haven asset in times of conflict? The data offers a nuanced answer. While on-chain volumes systematically increase during geopolitical crises, the nature of the flows reveals that it is not so much Bitcoin that plays the role of refuge, but rather stablecoins — specifically USDT.
In the Iranian case, the majority of observed withdrawals involved conversions to USDT toward self-custody wallets, not Bitcoin purchases. This finding is explained by the very nature of the need: Iranians are not seeking Bitcoin’s speculative upside, but the stability of the digital dollar. In a country where the rial can lose 10% of its value in a week, USDT offers an anchor of stability that Bitcoin, with its daily fluctuations of 5 to 10%, cannot guarantee.
Nevertheless, Bitcoin retains an important structural role. Its censorship resistance and the impossibility for a government to freeze a Bitcoin wallet make it an ultimate tool for individual financial sovereignty. As a Chainalysis analyst summarizes: “In times of relative peace, Iranians use USDT. In times of existential crisis, they turn to Bitcoin.”
Implications for international regulation
The Iranian episode raises formidable questions for Western regulators and policymakers. How can the effectiveness of sanctions be maintained while recognizing that the same technologies serve as a lifeline for civilian populations? Should on-chain surveillance be strengthened at the risk of criminalizing the legitimate use of cryptocurrencies by citizens in distress?
Blockchain analysis firms like Chainalysis and Elliptic find themselves in an ambiguous position. Their tools allow governments to trace illicit flows, but each published report also highlights the impossibility of clearly separating “legitimate” from “suspicious” flows in an ecosystem as complex as Iran’s.
What is certain is that each new geopolitical escalation reinforces the role of cryptocurrencies as a parallel financial infrastructure. Whether one sees it as progress toward individual financial freedom or a threat to the international economic order, the $10.3 million that left Iranian exchanges in 48 hours testifies to a reality that is now inescapable: in a world of conflict and sanctions, the blockchain has become a battlefield in its own right.
📚 Glossary
- Stablecoin: A cryptocurrency whose value is pegged to a stable asset, typically the US dollar. Stablecoins like USDT allow holders to maintain dollar exposure without going through the traditional banking system.
- On-chain: Refers to any activity or data recorded directly on a blockchain. On-chain analysis allows tracking cryptocurrency flows between addresses and identifying market trends.
- Centralized Exchange (CEX): A cryptocurrency exchange platform managed by a centralized entity that holds users’ funds. Nobitex is Iran’s main CEX.
- Self-custody: The practice of holding one’s own cryptocurrencies in a personal wallet, without an intermediary. The user controls their private keys and therefore their funds.
- Sanctions: Economic and financial measures imposed by states or international organizations to restrict the commercial and financial activities of a targeted country. Iran has been subject to American and European sanctions for several decades.
- USDT (Tether): The most widely used stablecoin in the world, issued by the Tether company. Each USDT is theoretically backed by one US dollar in reserve. It is the preferred asset for Iranians to protect their savings from rial devaluation.
Frequently Asked Questions
Why do Iranians use cryptocurrencies so extensively?
The massive adoption of cryptocurrencies in Iran is primarily driven by the collapse of the rial, which has lost 96% of its value, and chronic inflation of 40 to 50% per year. International sanctions limit access to the global banking system, pushing 13.5% of the population to use digital assets — particularly stablecoins like USDT — to preserve their savings and conduct international transactions.
What is Nobitex and what is its role in Iran?
Nobitex is Iran’s largest cryptocurrency exchange, claiming between 11 and 15 million users. It handles the majority of exchanges between the Iranian rial (toman) and cryptocurrencies, particularly USDT. During the strikes, Nobitex suspended the USDT/Toman pair due to the massive influx of withdrawals.
Are all Iranian crypto flows illicit?
No. While some flows may be linked to sanctions evasion activities, notably through entities connected to the Revolutionary Guard (IRGC), the majority of Iranian users are ordinary citizens seeking to protect their savings from rial devaluation. Chainalysis estimates that IRGC-linked flows accounted for about 50% of exchange inflows in Q4 2025, meaning the other half is of civilian origin.
Is Bitcoin truly a safe haven in times of war?
On-chain data shows that stablecoins (USDT) primarily serve as a safe haven during crises, rather than Bitcoin itself. Iranians favor the stability of the digital dollar to protect their immediate purchasing power. Bitcoin is used more as a long-term investment vehicle or as an ultimate tool for financial sovereignty thanks to its censorship resistance.
📰 Sources
This article is based on the following sources:
- Chainalysis Blog – On-chain data on outflows from Iranian exchanges and analysis of IRGC connections.
- Elliptic Blog – Tom Robinson’s analysis of the coordinated nature of Iranian crypto withdrawals.
- Chainalysis Geography of Cryptocurrency Report – Data on the Iranian crypto ecosystem ($7.78B, 13.5% adoption).
- Nobitex – Iran’s largest cryptocurrency exchange (11-15M users).
How to cite this article: Fibo Crypto. (2026). Iran: Crypto Outflows Surge 700% After US-Israel Airstrikes — On-Chain Data Reveals the Scale. Retrieved March 4, 2026, from https://fibo-crypto.com/blog/iran-crypto-outflows-700-us-israel-airstrikes
