Chainalysis: addresses linked to Iran, Russia, North Korea, and other US-sanctioned entities received $100B+ in crypto last year, almost 8x the amount in 2024
Blacklisted entities handled $100 billion in crypto in 2025, financing terrorism and weapons — Iran, Russia, North Korea …
Context & Ripple Effects
Chainalysis’ earlier coverage had already shown sanctioned actors as a large share of illicit crypto activity: sanctioned jurisdictions and entities received $15.8B in 2024, while Tornado Cash inflows rose sharply. Its reporting also tied Iranian exchange activity to Binance and documented North Korean crypto theft as a persistent funding source.
The new figure marks a far larger scale of identified exposure in 2025, alongside a separate increase in reported crypto theft. It matters because it shifts the issue from isolated illicit transactions toward the capacity of crypto markets and intermediaries to detect, contain, and recover value connected to sanctioned actors.
First-order effects
- Exchanges, DeFi services, and other crypto intermediaries face a substantially larger pool of addresses and flows requiring sanctions screening, transaction monitoring, and potential blocking or reporting.
- Chainalysis and comparable tracing providers gain a more central role in attributing wallet exposure, including the distinction between funds held directly by illicit entities and funds with downstream exposure to them.
Second-order effects
- Compliance demands are likely to extend beyond directly sanctioned wallets to counterparties and services that receive tainted funds, increasing operational friction for platforms with weaker controls.
- The reported concentration of sanctioned-entity activity, together with rising theft, strengthens the case for tighter risk controls around DeFi and cross-platform fund movement rather than treating hacks and sanctions evasion as separate problems.
Third-order effects
- If such growth persists, crypto’s institutional adoption will increasingly be shaped by whether markets can offer credible provenance, monitoring, and recovery capabilities—not simply by transaction access or liquidity.
- The large stock of crypto tied directly or indirectly to illicit activity could also complicate policy discussions around official crypto reserves, since recoverability and ownership attribution become strategic questions.
The trend: Crypto compliance is shifting from policing discrete illicit wallets toward managing systemic sanctions and provenance risk across interconnected on-chain markets.