Blockchain analytics platform Arkham has published what it describes as a public, onchain map of crypto wallets attributed to Iran’s central bank, making two US-sanctioned Tron addresses fully searchable for investigators and the general public. The development follows a $344 million USDT freeze by US authorities and Tether, marking one of the largest stablecoin-related sanctions actions to date.

Arkham’s May 11 research post groups the wallets into a Central Bank of Iran entity page and explorer, which the firm says can serve as a starting point to trace connected addresses and fund flows. The map is built on two TRC-20 wallets that the US Treasury’s Office of Foreign Assets Control (OFAC) added to its Specially Designated Nationals list on April 24 as property of Bank Markazi Jomhouri Islami Iran, citing links to the Islamic Revolutionary Guard Corps-Qods Force and Hezbollah.

US authorities froze approximately $344 million in crypto tied to Iran as part of that action, Treasury Secretary Scott Bessent stated, describing it as an effort to “systematically degrade Tehran’s ability to generate, move, and repatriate funds.” Tether separately confirmed it had frozen the funds at the request of US authorities over “activity tied to unlawful conduct,” without explicitly naming Iran in its public statement.

The Significance of Onchain Forensics

Arkham’s wallet mapping reflects a broader push by blockchain analytics firms and stablecoin issuers to expose and disrupt sanctions evasion networks that increasingly rely on crypto infrastructure tied to Tron and Tether. By making the wallets publicly viewable, Arkham enables independent researchers, law enforcement agencies, and financial institutions to monitor transactions in real time, potentially deterring further illicit activity.

The two sanctioned addresses have been linked to a complex web of intermediaries, including brokers and exchange wallets that route funds through decentralized finance protocols. Chainalysis, in an April 27 note, described a multi-step stablecoin “pipeline” in which Iranian oil revenues were channeled through brokers, intermediary wallets, cross-chain bridges, and DeFi platforms before cycling back into accounts associated with the Central Bank of Iran and IRGC-linked entities. This pipeline effectively allowed Tehran to bypass traditional banking sanctions and access global liquidity.

Iran’s Expanding Crypto Footprint

The Arkham findings come against a broader backdrop of growing Iranian crypto use. A February report on Iran’s digital assets footprint, citing estimates from TRM Labs and Chainalysis, put the country’s overall crypto transaction volume at about $11.4 billion in 2024 and $10 billion in 2025. This growth is driven by both state-sanctioned activities and private users seeking alternatives to the sanctioned banking system.

In May, Nobitex, Iran’s largest crypto exchange, was reportedly linked to members of a powerful family with ties to Supreme Leader Ali Khamenei, and used as a key conduit between domestic users and offshore liquidity. The exchange has faced accusations of facilitating money laundering and sanctions evasion, though it denies any wrongdoing.

Additionally, Iran has reportedly considered charging crypto-denominated tolls to ships transiting the Strait of Hormuz, positioning digital assets as an additional revenue channel outside traditional banking rails. Such a move would further entrench crypto as a tool for state revenue generation in a country under heavy economic sanctions.

Technical Details of the Sanctioned Wallets

The two TRC-20 wallets identified by OFAC are:

• TJZXQ... (partial address) – allegedly used for receiving funds from oil export brokers.
• TKHZD... (partial address) – linked to transfers to Hezbollah-linked entities in Lebanon.

Arkham’s entity page shows that these wallets have transacted with dozens of counterparties, many of which are flagged as high-risk. The analysis includes flow diagrams and timestamps, allowing users to follow the movement of funds across multiple layers of obfuscation.

This level of transparency is unprecedented for a state-sponsored actor in the crypto space. Previously, sanctions lists provided only static addresses, but Arkham’s dynamic mapping enables continuous monitoring of new connections and changes in behavior.

Role of Tron and Tether in Sanctions Evasion

Tron has become the preferred blockchain for Iranian entities due to its low fees and high throughput. The network hosts over $50 billion in USDT supply, making it a prime target for illicit actors. Tether’s ability to freeze funds on Tron is limited to addresses that are voluntarily blacklisted by the issuer, as the Tron network itself cannot freeze tokens without the issuer’s cooperation.

In a recent 30-day period, Tether froze more than 500 million USDT across Ethereum and Tron, with about 506 million on Tron, according to BlockSec’s USDT Freeze Tracker. A TRON spokesperson told Cointelegraph that the network itself cannot monitor or block individual transactions, but pointed to the T3 Financial Crime Unit, a collaboration between TRON, Tether, and TRM Labs launched in 2024, as its main channel for tackling abuse. The unit works with law enforcement to freeze hundreds of millions in funds, including those tied to sanctioned entities and terror financing.

Tether declined to comment on the specific Iran-linked addresses, but its cooperation with US authorities underscores the growing role of stablecoin issuers in enforcing international sanctions.

Broader Implications for Crypto Regulation

The Arkham mapping and subsequent freeze highlight the tension between crypto’s promise of permissionless transactions and the reality of regulatory pressure. While blockchain transparency allows for unprecedented tracking, it also enables bad actors to be identified and sanctioned. The US Treasury has increasingly focused on crypto as a vector for sanctions evasion, with the OFAC adding dozens of crypto addresses to its SDN list each year.

Experts argue that Iran’s use of stablecoins is a natural adaptation to financial isolation. With traditional banking channels cut off, digital assets offer a lifeline for trade, particularly for oil exports. However, the same technology that provides Iran with access to global markets also leaves a forensic trail that can be exploited by adversaries.

Looking ahead, the combination of onchain analytics and issuer cooperation is likely to become a standard tool for sanctions enforcement. Tether’s willingness to freeze funds at government request sets a precedent for other stablecoin issuers. Meanwhile, blockchain analytics firms like Arkham and Chainalysis continue to refine their mapping techniques, making it harder for state actors to hide their crypto activities.

Source: Cointelegraph News