ANALYSIS: 344 million frozen — how Iran finances its wars in the shadow of the blockchain

Attribution in cryptography is never absolute

The word “allegedly” in the initial report is not routine journalistic hedging. It says something essential about the nature of attribution in blockchain analysis. On a public blockchain like Ethereum or Bitcoin, every transaction is visible to everyone. You can see exactly how much money went into which address, at what time, and from which other address. What you cannot see directly is who controls that address. The address itself is cryptographically neutral—it has no name, no passport, and no Social Security number attached to it.

Attribution—the link between an address and a real-world entity—is built through the accumulation of clues. Exchange platforms that have collected KYC (Know Your Customer) information on their users. IP addresses that have interacted with these addresses. Transaction patterns that match known behaviors. Human sources. International judicial cooperation. It’s classic investigative work, applied to the digital realm. Robust at its best. Fallible at its worst.

The word “allegedly” also implies this: we are in a context of maximum diplomatic pressure on Iran, with nuclear negotiations underway in 2025, and a Trump administration that has made a hard line against Tehran a defining feature of its identity. In this context, announcing the seizure of 344 million “linked to Iran” is also a political message. The factual issue and the political issue are not easily separated. That is not a reason not to believe OFAC. It is a reason not to stop at this announcement.

When the Legitimacy of the Seizure Becomes a Legal Issue

The U.S. government’s seizure of cryptocurrencies rests on solid—but not unlimited—legal grounds. The International Emergency Economic Powers Act (IEEPA), invoked for most Iranian sanctions, grants the U.S. president extraordinarily broad powers to block transactions and seize assets during a national emergency. The national emergency regarding Iran was declared by Jimmy Carter in 1979—and has been renewed by every president since. Technically, it has never ended.

But seizing crypto assets is not the same as seizing bank accounts. One must obtain the private keys to the relevant wallets—either by cooperating with centralized exchange platforms that hold them, by exploiting security vulnerabilities, or, in the best-case scenario, by obtaining judicial cooperation. If the funds are in self-hosted wallets—so-called “cold wallets”—and the private keys are in Iran, freezing them is essentially a legal fiction: U.S. authorities can declare the funds frozen, but they cannot access them. 344 million frozen in theory may very well be 344 million still in circulation in practice.

Binance, Tether, OKX — the names we don’t say loud enough

In November 2023, Binance—the world’s largest cryptocurrency exchange—pleaded guilty in a U.S. court to allowing Iranian users to conduct transactions in violation of U.S. sanctions. The fine: $4.3 billion. CEO Changpeng Zhao personally pleaded guilty to a money laundering-related offense. This is not just an anecdote—it’s confirmation that the sanctions-evasion scheme would not have worked without the active or passive complicity of exchange platforms, some of which are based in countries allied with the United States.

Tether, the issuer of USDT—the world’s most widely used stablecoin, pegged to the U.S. dollar—has been consistently identified in blockchain analysis reports as a preferred vehicle for sanctions evasion. In January 2024, the analytics firm Chainalysis documented that sanctioned entities had received more than $24 billion in USDT in 2023. Twenty-four billion. The amount frozen on April 25 represents 1.4% of that annual figure.

Binance paid $4.3 billion. Its executives pleaded guilty. And the platform continues to operate, with hundreds of millions of users worldwide. I’m not saying that there was no punishment. What I’m saying is that when a $4.3 billion fine doesn’t put a company out of business, it’s because the fine amounts to less than the cost of changing its business model. It’s simple math. And that math explains why the problem persists.

Regulation is lagging behind technology by a decade

The global regulatory framework for cryptocurrencies was designed in hindsight, in response to scandals and seizures. The FATF (Financial Action Task Force) Travel Rule—which requires platforms to report information on the identities of transaction senders and recipients—was adopted in 2019. Its effective implementation in the world’s major economies is still taking time in 2025. Years pass between the adoption of a standard and its effective enforcement. During those years, actors seeking to circumvent the rules find loopholes.

Mixers—services that obscure the traceability of transactions—have been sanctioned by OFAC (Tornado Cash in 2022, Sinbad in 2023). But sanctioning a decentralized protocol does not erase its code. Tornado Cash continues to operate on the Ethereum blockchain, its code accessible to anyone who wants to download it. Developers can be arrested—Roman Storm was indicted in 2023—but the code itself is immortal. This is the fundamental paradox facing regulators: they can prosecute people, not algorithms.

April 2025: Maximum Pressure Meets Forced Dialogue

The context of this announcement is significant. In April 2025, negotiations between the United States and Iran on the nuclear issue resumed in Oman, under Omani mediation—the same discreet channels that had been used in 2015 to reach the JCPOA. U.S. Special Envoy Steve Witkoff traveled to Muscat for talks whose substance remains confidential. Tehran sent Abbas Araghchi, its foreign minister.

Announcing the seizure of $344 million “linked to Iran” in the midst of these negotiations is rarely accidental in U.S. diplomacy. It is a message directed simultaneously at several audiences: Iran (“we know your financial flows”), the Republican-controlled U.S. Congress (hostile to any agreement with Tehran), and allies in the Middle East—led by Israel—who are anxiously monitoring any sign of a thaw in U.S.-Iranian relations. Cryptocurrency has become a diplomatic tool. Blockchain addresses are pieces on the chessboard of negotiations.

And yet, this is what deeply troubles me about the timing: if the U.S. administration knows exactly where Iran’s cryptocurrency funds are, and if it is capable of freezing $344 million of them, then it holds considerable leverage in the nuclear negotiations. The question is not whether this freeze is legitimate. It is why it is being announced now, at this precise moment in the diplomatic calendar. Decisions regarding the communication of asset seizures are never neutral.

Uranium Enrichment Paid for in Bitcoin

According to IAEA reports from early 2025, Iran currently possesses stocks of uranium enriched to 60%—a level with no plausible civilian justification, just a few technical months away from a bomb. Iran’s nuclear program costs money. The advanced IR-6 centrifuges installed at Natanz and Fordow. The nuclear engineers. Facility security. Research on detonators. None of this comes for free.

The Trump administration claims that the frozen funds are “linked to Iran.” But “linked to” can mean many things in OFAC’s language. It can mean directly controlled by the Iranian government or the IRGC. It can mean held by a sanctioned entity that has business ties to Tehran. The two scenarios have very different implications regarding the ultimate use of these funds. What the administration has not said—and this is significant—is whether these 344 million were intended to finance the nuclear program, Hezbollah, the Houthis, or simply to circumvent economic sanctions for import purposes.

What That Amount Buys in Conflict Zones

Let’s put $344 million into perspective with the reality of the wars Iran is funding. A Shahab-3 ballistic missile—the backbone of Iran’s arsenal and that of its proxies—costs between $500,000 and $2 million per unit. $344 million would be enough to fund between 170 and 688 missiles. A Shahed-136 drone—the model used extensively by the Houthis and by Russia in Ukraine—costs approximately $20,000 to $50,000 to produce. $344 million would fund between 6,800 and 17,200 drones.

These figures aren’t meant to impress. They’re meant to illustrate what money actually means in a war economy. Leila, a 27-year-old midwife in Sana’a, has been working since 2015 at a hospital that treats civil war casualties. She hasn’t had access to basic antibiotics for six months because of the port blockade. The last humanitarian convoy she saw arrive in Hodeidah was back in March. She doesn’t know what a blockchain is. She knows that bombs keep falling and that medicines are no longer arriving. The 344 million frozen in April 2025 won’t rebuild the hospital where she works.

And yet—and this is the “and yet” that’s hardest to write—freezing these funds isn’t enough if we don’t understand why they exist. Iran circumvents sanctions because the sanctions, enforced for 46 years, haven’t changed the regime’s behavior. They have impoverished ordinary Iranians. They have not stopped the nuclear program. They have not put an end to support for proxies. Something in the architecture of the pressure campaign has not worked. And to continue calling it “maximum pressure” without questioning the results is to tell ourselves a convenient story.

Iran, the First State to Master Crypto-Diplomacy as a Means of Circumvention

Iran is not alone in this category. According to the 2024 report by the UN panel of experts, North Korea is said to have stolen more than $3 billion in cryptocurrencies between 2017 and 2023 to finance its nuclear and ballistic missile programs. Russia is using cryptocurrencies to circumvent sanctions imposed after February 2022. Assad’s Syria did the same before his regime fell.

But Iran is unique: it is the first state to have industrialized cryptocurrency mining as a matter of state economic policy, with legal and registered mining facilities serving as a cover for illicit operations. The Central Bank of Iran has even considered on several occasions creating a national cryptocurrency pegged to gold. This is not a regime that is merely adapting to technology—it is a regime that has integrated it into its economic survival strategy.

The funds pass through servers in Frankfurt, Amsterdam, and Singapore

There is one detail in all these investigations into Iranian crypto financing that official statements rarely mention explicitly: for Iranian funds to be converted into usable value in the real world, they must pass through infrastructure nodes located outside of Iran. The servers of major exchange platforms are located in Malta, Singapore, the United States, and the Netherlands. Blockchain validation nodes are distributed around the world—including in NATO countries.

When Iranian funds pass through a mixer hosted on a server in the Netherlands and then emerge converted on a Singapore-based exchange platform, engineers in Western cities wrote the code that made this transaction possible. The overwhelming majority of them are not active accomplices. They are developers who created neutral tools—and who chose not to think too deeply about how those tools would be used. This neutrality comes at a cost. That cost is measured in dollars of terrorist financing. And sometimes, in lives.

We have all, collectively, funded the infrastructure that makes this possible. Not directly. But by buying cryptocurrencies without asking ourselves where the market’s liquidity came from. By applauding the “DeFi revolution” without questioning who else was benefiting from this disintermediation. By accepting that “code is law” is a sufficient answer to the question of accountability. The ideology of technological neutrality has provided intellectual cover for uses that even its most sincere defenders would have been the first to condemn.

The Tornado Cash Developers and the Question of Liability

Roman Storm, a 34-year-old American-Russian developer, was arrested on August 23, 2023, in Washington. He is the co-creator of Tornado Cash, the cryptocurrency mixer most widely used by sanctioned entities—including, according to OFAC, Iranian agents and the North Korean Lazarus Group. Storm says he created a privacy tool. The U.S. government says he created a money-laundering infrastructure serving North Korea and Iran.

Both claims are true at the same time—and that is precisely the difficulty. Tornado Cash has indeed been used for legitimate transfers by privacy-conscious individuals. It has also been used by sanctioned actors to move hundreds of millions of dollars. The legal question that the federal court in Manhattan must decide is not merely whether Roman Storm is guilty. It is the question of the liability of infrastructure creators for the uses to which their infrastructure is put—an issue for which there is still no settled answer in U.S. law.

Freezing Assets Is Not the Same as Dismantling Them

The announcement of the freeze on $344 million is being presented as a victory for renewed “maximum pressure.” But freezing is not the same as dismantling. Frozen assets can be unfrozen as part of an agreement. They can be the subject of legal challenges that last for years. They may have already been partially moved before the actual seizure took place. The history of U.S. seizures of Iranian assets is a history of funds tied up for decades—the $6 billion in Iranian assets that were frozen, then unfrozen, then refrozen as part of the hostage negotiations illustrates this reversibility.

What the Trump administration is also failing to do is address the structural conditions that make this circumvention possible. The United Arab Emirates remains the main hub for converting Iranian cryptocurrencies into dirhams and physical assets. For years, Dubai has been described by U.S. Treasury investigators as the hub of Iranian money laundering. The UAE is also a strategic partner of the United States, home to U.S. military bases in the Gulf, and a signatory to the Abraham Accords. Maximum pressure ends where geopolitical interests begin.

And yet—secondly, and yet—it would be intellectually dishonest to dismiss this seizure out of hand. 344 million frozen is 344 million that may not finance the next shipment of weapons to the Houthis. Perhaps. I cannot certify the final destination of these funds. No one can say for certain. But in the dynamics of applying pressure on a regime, every bit of friction counts. The problem isn’t that this action is useless. The problem is that it’s being sold to us as sufficient.

The “maximum pressure” strategy: a seven-year assessment

Trump reinstated “maximum pressure” as soon as he returned to power in January 2025, signing executive orders that further tightened sanctions against Iran’s oil sector. Since 2018, Iranian oil exports have fallen from about 2.5 million barrels per day to a few hundred thousand—but not to zero, because China continues to buy Iranian oil at a discount, in yuan, in cryptocurrencies, or through shell companies. The exact figure in 2024 was approximately 1.4 million barrels per day exported despite the sanctions, according to the International Energy Agency.

Iran’s nuclear program, meanwhile, has advanced. In 2018, Iran was enriching uranium to 3.67%—the JCPOA’s cap. Today, it is enriching to 60%. The amount of enriched uranium has increased thirtyfold. If maximum pressure was supposed to halt the nuclear program, the results have been catastrophic. If it was meant to impoverish the regime and bring about its collapse, the regime is still in power. Ordinary Iranians, however, have indeed been impoverished. The policy of maximum sanctions has succeeded in punishing the population. It has failed to change the regime.

When the Dollar Loses Its Coercive Power

The architecture of the dollar as an economic weapon rests on a simple premise: global transactions pass through the U.S. financial system or systems that depend on it. Payments in dollars are cleared through correspondent banks in the United States. Excluding an entity from the SWIFT system or from dollar clearing means excluding it from global trade. This architecture has functioned with formidable efficiency for thirty years.

The rise of cryptocurrencies is creating a fork in this architecture. Bitcoin, Ethereum, and especially stablecoins like USDT offer an international payment infrastructure that bypasses the United States—not the Fed, not U.S. correspondent banks, and not SWIFT. The irony is that USDT—the digital dollar most widely used to circumvent U.S. sanctions—is pegged to the U.S. dollar and issued by a company (Tether) that formally cooperates with U.S. authorities. But once issued, its circulation largely escapes Washington’s control.

What is at stake here goes beyond Iran. What is at stake here is whether Western democracies will retain the ability to use their financial system as a tool of foreign policy over the next twenty years. If the answer is no—if cryptocurrencies become liquid and accessible enough for any sanctioned state to finance its operations—then the entire sanctions framework will collapse. Iran is currently testing the limits of this framework. North Korea has already breached it in several respects. And no one in Western capitals seems willing to face this problem head-on.

Beijing as a Silent Facilitator

There is one player missing from all official statements regarding the frozen $344 million: China. Beijing buys Iranian oil. Chinese banks—not the major institutions, but regional banks and second-tier state-owned entities—facilitate transactions with sanctioned Iranian entities. The digital yuan (e-CNY), whose international deployment is still limited, is touted by some experts as the potential successor to USDT for sanctioned countries seeking to break free from the dollar.

In 2023, Iranian exports to China reached a record high of $14 billion, according to Chinese customs data. A large portion of these transactions takes place through opaque mechanisms—bartering oil for equipment, yuan settlements in under-the-radar banks, and the use of intermediaries in third countries. The $344 million in cryptocurrency frozen by Washington represents only a fraction of the parallel system that Beijing maintains to allow Tehran to breathe economically despite the sanctions. And to sanction China for this? That would be tantamount to a global economic war. No one will do that.

The Documented Failure of Forty-Six Years of Sanctions

Here’s what the U.S. Treasury’s press releases will never say: Forty-six years of sanctions have not changed the fundamental policy of Iran’s Islamic regime. Not on nuclear issues. Not on support for proxies. Not on internal repression. The mullahs have survived Carter, Reagan, Bush Sr., Clinton, Bush Jr., Obama—with the JCPOA interlude—Trump, Biden, and now Trump again. They have survived sanctions, targeted assassinations, sabotage, Stuxnet, and diplomatic isolation.

This does not mean that sanctions are useless. It means that sanctions alone are insufficient. And to announce with great fanfare the freezing of 344 million in cryptocurrency, without framing it within a broader strategy that answers the question “What specific Iranian behavior do we want to change, and how does this frozen 344 million contribute to that change? ”—is to confuse action with policy. It is doing something just to look like you’re doing something.

And yet—third and final point—I am not arguing for the lifting of sanctions. I am arguing for intellectual honesty about their limitations. There is a difference between weakening a regime and changing it. Sanctions do the former. They systematically fail to do the latter. As long as Western policymakers fail to distinguish between these two objectives, they will continue to celebrate every asset seizure as a strategic victory when it is merely a tactical victory in a war they have not clearly defined.

The Smoke Screen of Anti-Crypto Rhetoric

There is also, in the reaction of some commentators to this announcement, a temptation to make cryptocurrencies themselves the problem. That would be a mistake in analysis. Before cryptocurrencies, Iran used physical gold, the hawala system, shell companies in compliant jurisdictions, and oil sold at rock-bottom prices. The tools change. The desire to circumvent restrictions, however, remains constant. Banning cryptocurrencies would not stop Iran. It would simply push the flows toward other channels—ones that are likely even harder to trace.

What can make a difference is smart regulation of exchange platforms—not banning them, but holding them effectively accountable, with personal criminal penalties for executives who turn a blind eye, proactive reporting requirements, and structured international judicial cooperation. These mechanisms exist in part. They are underutilized because they create friction in an industry that generates billions in tax revenue and employs tens of thousands of people in key electoral districts. Politics, once again.

344 Million Frozen — and the Question That Remains

On April 25, 2025, the Trump administration froze $344 million in cryptocurrencies linked to Iran. This is real. It’s significant. And it’s probably not enough to change anything about the fundamental trajectory of the Islamic regime, nor that of the conflicts it finances. That’s not a reason not to do it. It’s a reason not to stop there.

What this seizure reveals is the structure of a problem that Western democracies have been slow to recognize in its full scope: the international financial system they have built now contains channels that they no longer control. Not just for Iran. For all actors who have an interest in circumventing the rules. Blockchain isn’t the problem. It’s a symptom of a deeper issue: global governance of the financial system hasn’t kept pace with the technology that underpins it.

What remains with me, after tracing this trail from the hexadecimal addresses all the way to the negotiations in Muscat, is an image: Leila, the midwife from Sana’a, operating by the light of a flashlight because the generator has broken down and there is no more fuel. Somewhere within the financial flows that OFAC investigators have been tracing for months, there may have been money intended to fund the drone that destroyed her hospital’s fuel depot. Perhaps. She will never know. And as for us, we’ll have read the news about the 344 million, nodded, and scrolled on to the next alert.

The Final Image

In a warehouse somewhere—perhaps in Tehran, perhaps in Dubai, perhaps in an anonymous data center somewhere in Central Asia—hundreds of machines hum. Fans whir. Processors are burning through electricity at 7 cents per kilowatt-hour, subsidized by the government. Hashes are being calculated. Blocks are being validated. Money is being created, transaction after transaction, in a ledger that no one owns and that anyone can read.

344 million of this flow were frozen last Friday. The flow itself continues.

By Maxime Marquette, columnist