A massive $344 million USDT freeze has exposed how Iran-linked funds are routed through stablecoin networks, with Chainalysis mapping a multi-step pipeline across brokers, intermediary wallets, and DeFi protocols. The blockchain analytics firm detailed the analysis in an April 27 blog post, coinciding with the Office of Foreign Assets Control (OFAC) adding two crypto addresses tied to the Central Bank of Iran to its sanctions list.
Key Takeaways
Tether froze over $344 million in USDT across two blockchain addresses on April 23, 2026, acting on information shared with U.S. law enforcement. Chainalysis tied the addresses to activity involving Iranian exchanges and intermediary wallets that interacted with Central Bank of Iran-associated accounts. The firm stated: “Iran’s digital asset networks provide the critical financial infrastructure needed to launder the billions of dollars generated by these shadow fleet vessels back to the IRGC and Iran-aligned terrorist organizations across the region.”
How the Money Flowed: Brokers, DeFi, and Sanctioned Individuals
Chainalysis also described earlier stablecoin activity linked to Iran. In late 2025, sanctioned individual Babak Morteza Zanjani published leaked documents that included cryptocurrency addresses he claimed were tied to the Central Bank of Iran. Those materials indicated that a broker helped the regime buy stablecoins with fiat currency. That broker had exposure to Alireza Derakhshan, who coordinated more than $100 million in crypto purchases linked to Iranian oil sales from 2023 to 2025. Chainalysis outlined a transaction flow where funds moved from brokers into stablecoins, through intermediary wallets, across bridges and DeFi protocols, before returning to Iranian crypto channels and Islamic Revolutionary Guard Corps (IRGC)-affiliated entities.
Strait of Hormuz Compliance Risks
The analysis also points to fresh compliance risks around the Strait of Hormuz. Iran reported collecting toll payments from commercial vessels, while scammers allegedly targeted shipping firms trying to comply with those demands. Some companies paid fraudulent actors and were later confronted by IRGC naval vessels after Iranian authorities did not receive the funds. Payment methods remain under investigation, though Chainalysis said stablecoin use would fit recent Iranian on-chain activity if confirmed. The firm noted: “Central Bank of Iran funds were laundered through several bridge and DeFi protocols before being cycled back into the mainstream Iranian crypto ecosystem.”
This incident underscores the central role of stablecoins in sanctioned state financing networks and demonstrates the capability of law enforcement and blockchain analytics to trace and freeze such funds. Chainalysis’s analysis shows that these transactions form a continuous, traceable pathway linking funding sources, routing layers, and sanctioned entities, providing critical intelligence for global regulators.