Iran's crypto market shed roughly 80% of its transaction volume in the three days following U.S.-Israeli military strikes that began February 28, 2026, according to blockchain intelligence firm TRM Labs. The near-total collapse in activity, recorded between February 27 and March 1, was driven primarily by an internet blackout imposed by the Iranian regime that cut connectivity by approximately 99%. Despite the severity of the disruption, TRM Labs assessed the country's underlying crypto infrastructure as degraded but structurally intact, describing the situation as one of "stress, not failure." The same infrastructure supports approximately 15 million ordinary Iranians who rely on digital assets for everyday financial access.

The strikes, which killed Supreme Leader Ali Khamenei, triggered an immediate panic response across Iran's exchange ecosystem. Outgoing transactions on Nobitex, the country's largest crypto exchange and a platform handling approximately 87% of all Iranian-linked crypto volume and serving over 11 million users, spiked 700% within minutes of the initial attacks. Several other platforms including Wallex, Aban Tether, and Ramzinex suspended deposits and withdrawals entirely. Tabdeal, another major operator, shifted to twice-daily batch processing to manage order flow. Iran's Central Bank moved to halt trading of the USDT-toman pair (USDT is a dollar-pegged stablecoin; the pair tracks its exchange rate against Iran's toman) to contain volatility. When that pair resumed trading, thin order books and price dislocations pointed to impaired liquidity rather than market recovery.

TRM Labs cautioned against reading the Nobitex data as evidence of capital flight. The exchange recorded approximately $3 million more in total flows after the strikes, and a cold storage transfer of at least $35 million on February 28 was assessed as routine operational activity rather than an emergency fund movement. "Connectivity disruptions limit retail access, disconnect automated trading systems, reduce arbitrage activity, and constrain exchange APIs," TRM Labs wrote in its post-strike analysis. "This appears consistent with mechanical access limitations rather than a collapse in market infrastructure." Ari Redbord, TRM Labs' head of policy, speaking in early February in the context of U.S. Treasury probes into IRGC-linked exchange infrastructure, separately noted: "The concern is that the activity appears concentrated through exchange-linked systems that function as repeatable financial access points for sanctioned networks."

The strikes did not occur in isolation. Iran's crypto market had already absorbed a punishing sequence of shocks throughout 2025, and a notable precedent from that period shapes how analysts read the February 2026 data: during a 12-day Israel-Iran conflict in June 2025, crypto volume actually increased approximately 35% while transaction counts fell 40%, a pattern consistent with large-value, lower-frequency capital movement under conflict conditions. Also in June, Predatory Sparrow (Gonjeshke Darande), a pro-Israel hacking group, exploited Nobitex for $90 million while also exposing surveillance features built into the platform that shielded VIP users while monitoring ordinary ones. The following month, Tether froze 42 cryptocurrency addresses linked to Nobitex and the Islamic Revolutionary Guard Corps (IRGC), sending Iranian trading volumes down more than 76% in a single month. In August 2025, Iran imposed a capital gains tax on crypto trading, adding further regulatory pressure to an already stressed market. Iran's central bank had been quietly accumulating at least $507 million in USDT (a dollar-pegged stablecoin) through 2025 to support the rial and facilitate trade settlement. Against that backdrop, Iran processed roughly $10 billion in total crypto activity in 2025, down from $11.4 billion in 2024. That year-on-year decline predates the February 2026 conflict; the strikes then accelerated the contraction, compressing volume by a further 80% within days.

The IRGC's footprint across this ecosystem is substantial. According to Chainalysis, IRGC-linked addresses accounted for more than 50% of Iran's total crypto inflows in the fourth quarter of 2025, up from roughly 40% the year before. Total IRGC-linked flows exceeded $3 billion in 2025. Those are lower-bound estimates; many associated wallets remain unidentified. Known uses include procurement of drone components and AI hardware via Chinese resellers (according to TRM Labs), payments to foreign operatives, and compensation for recruited intelligence assets. The distinction matters because the same infrastructure serves approximately 15 million ordinary Iranians who hold or use digital assets, widely reported as a hedge against the rial's persistent inflation. Indiscriminate enforcement that cannot separate retail users from state actors carries real financial exclusion costs for that population.

The compliance implications extend well beyond Iran's borders. The February 2026 reinstatement of National Security Presidential Memorandum 2 (NSPM-2) formalized maximum pressure as the operative enforcement framework, setting the climate in which financial regulators and exchanges must now operate. Iran's dominant crypto rails run on TRON's TRC-20 USDT standard (a version of the stablecoin that operates on the TRON blockchain, favored for its low transaction fees, high processing speed, and deep regional liquidity). That same infrastructure is the backbone of informal remittances across Pakistan, India, Bangladesh, Afghanistan, and parts of Sub-Saharan Africa. In January 2026, the U.S. Treasury's Office of Foreign Assets Control sanctioned Zedcex and Zedxion, two UK-registered exchanges, for processing roughly $1 billion in IRGC-linked flows. The IRGC accounted for 87% of Zedcex's total volume at its 2024 peak. For South Asian and African exchanges operating in grey regulatory zones, that designation signals that TRON-based USDT flows with Iranian counterparties carry enforcement risk regardless of where a platform is incorporated. African fintechs face particular exposure: the Financial Action Task Force is intensifying grey-list scrutiny of stablecoin corridors, and platforms that fail to implement counterparty screening risk designation as high-risk conduits in FATF mutual evaluations. The July 2025 Tether freeze also established a clear precedent: Tether's centralized freeze capability can be deployed as a geopolitical instrument, which has strengthened the case for decentralized stablecoin alternatives among users in high-risk jurisdictions. Illicit stablecoin activity hit a five-year high in 2025 at approximately $141 billion, with 86% of that volume linked to sanctions evasion, according to data cited by BitKE.

The broader crypto market absorbed immediate damage from the strikes. Bitcoin fell to approximately $63,038, a roughly 6% decline, while about $128 billion was erased from total crypto market capitalization. Traders faced $515 million in liquidations within 24 hours. Iran's Bitcoin mining network, estimated to represent between 2% and 5% of global hashrate at a production cost of approximately $1,300 per coin, represents a further dimension of the country's crypto infrastructure that sustained conflict and sanctions pressure could disrupt or redirect. Iran's crypto ecosystem, whatever shape it takes after the current conflict, has already demonstrated a capacity to adapt: after the July 2025 Tether freeze, Iranian users rotated into DAI (a decentralized stablecoin) and the Polygon network. That same adaptability, combined with structurally intact infrastructure, suggests Iranian crypto activity will resume once connectivity is restored. The harder question for regulators is whether enforcement tools sophisticated enough to isolate state actors from retail users exist yet, and whether the political will to apply them selectively exists.