CoinEx Under Pressure Following $3.84 Billion Iran-Linked Flows

The investigation traced activity from two wallets controlled by the Central Bank of Iran, revealing a path that links these transactions to the 2025 Bybit hack. That heist, which the FBI attributed to North Korean actors, involved the theft of approximately $1.5 billion in virtual assets. Blockchain tracking shows these funds were converted into various tokens and shuffled through multiple accounts before hitting CoinEx, raising significant questions about the exchange's internal compliance and screening protocols.

This development intensifies the scrutiny surrounding how sanctioned states utilize digital assets to circumvent traditional financial barriers. While the U.S. Treasury has previously targeted Iranian exchanges like Nobitex and frozen nearly $1 billion in related crypto assets, the focus on CoinEx highlights a shift toward centralized platforms. Unlike decentralized protocols or mixers, centralized exchanges are expected to maintain rigorous customer due diligence. Regulatory bodies are now expected to evaluate whether these established controls were bypassed, potentially setting the stage for further enforcement actions against platforms that operate as gateways for illicit cross-border transfers.