The $344 million USDT freeze has exposed a sophisticated stablecoin pipeline used by Iran to circumvent sanctions, according to a detailed analysis by blockchain forensics firm Chainalysis. In a blog post on April 27, 2026, Chainalysis traced wallet activity tied to addresses linked to the Central Bank of Iran (CBI), revealing how funds moved through brokers, intermediary wallets, and decentralized finance (DeFi) protocols before reaching the Islamic Revolutionary Guard Corps (IRGC) and regional terrorist organizations.
Coordinated Freeze and Sanctions
On April 23, 2026, Tether froze over $344 million in USDT across two blockchain addresses in coordination with U.S. law enforcement. On the same day, the Office of Foreign Assets Control (OFAC) added those same addresses to its sanctions list, identifying them as tied to the Central Bank of Iran. Chainalysis confirmed that the frozen balance matched the $344 million figure, marking a synchronized enforcement action combining stablecoin freezing and financial sanctions.
The Money Laundering Pipeline
Chainalysis reconstructed the flow of funds: the CBI network first used brokers to purchase stablecoins with fiat currency. One such broker was linked to Alireza Derakhshan, who coordinated over $100 million in crypto purchases tied to Iranian oil sales between 2023 and 2025. The stablecoins were then passed through multiple intermediary wallets, bridge protocols, and DeFi platforms. According to a leak from sanctioned individual Babak Morteza Zanjani in late 2025, the broker network actively helped the regime convert fiat into stablecoins. The funds were eventually cycled back into the mainstream Iranian crypto ecosystem and transferred to IRGC-affiliated entities.
Strait of Hormuz Risk
The report also highlights emerging compliance risks around the Strait of Hormuz. Iran has claimed the right to collect toll payments from commercial vessels transiting the strait, while scammers have impersonated Iranian authorities to demand payments from shipping companies. Some firms paid fraudulent actors and were later confronted by IRGC naval vessels when the real Iranian authorities did not receive the funds. Chainalysis notes that if stablecoins were used for these payments, it would fit the on-chain patterns already observed in Iran’s crypto activity, further expanding the sanctions exposure for maritime trade.
Stablecoins at the Core of Sanctions Evasion
The $344 million freeeze is just one piece of a larger network. Chainalysis emphasized that stablecoins provide the critical financial infrastructure for Iran to launder billions of dollars generated by shadow fleet vessels and oil sales. The analysis demonstrates a continuous, traceable pathway from funding sources through brokers and DeFi routing to sanctioned entities. As enforcement tightens, the use of stablecoins in illicit finance will remain a key focus for regulators and blockchain analysts.