Iran Crypto Outflows Hit $10.3M After Airstrikes

Iran Bitcoin Outflows Reach $10.3 Million After US-Israel Airstrikes – On-Chain Data Points to Capital Flight and Self-Custody Shift

Key Takeaways

• US-Israeli airstrikes on February 28, 2026 were followed by $10.3 million in crypto outflows from Iranian exchanges between February 28 and March 2, according to Chainalysis.
• Blockchain analytics firm Elliptic reported a 700 percent surge in outflows from Nobitex within minutes of the first strikes.
• Nobitex processed $7.2 billion in crypto transactions in 2025 and serves more than 11 million users.
• Chainalysis identified self-custody, exchange fund management, and potential state-linked activity as possible drivers of the outflows.

Airstrikes in Tehran Trigger Immediate Spike in Crypto Withdrawals

On February 28, 2026, US-Israeli airstrikes hit key targets in Tehran, including nuclear facilities, missile sites, and the Pasteur district. Reports later confirmed the death of Supreme Leader Ayatollah Ali Khamenei and other senior officials.

In the hours following the strikes, on-chain data showed a marked increase in cryptocurrency activity. According to data compiled by Chainalysis, approximately $10.3 million in crypto assets flowed out of Iranian exchanges between February 28 and March 2. The timing of these withdrawals coincided with the immediate aftermath of the military action.

Chainalysis previously analyzed Iran’s $7.8 billion crypto ecosystem and found that trading volumes and withdrawals tend to rise during periods of domestic unrest and geopolitical shocks. The latest outflows follow that established pattern, with blockchain data showing a sharp increase in transactions soon after the strikes.

Nobitex Records 700 Percent Outflow Surge

Elliptic, a blockchain analytics firm, reported that Nobitex, Iran’s largest cryptocurrency exchange, experienced a 700 percent jump in outflows within minutes of the first airstrikes. Nobitex plays a central role in Iran’s digital asset market, serving more than 11 million users and processing $7.2 billion in crypto transactions in 2025.

The exchange provides a direct channel for converting Iranian rials into cryptocurrencies and transferring funds to external wallets. According to Elliptic, many of the withdrawn funds were traced to overseas exchanges that have historically received inflows from Iran. This pattern indicates that users sought to move capital beyond the domestic financial system following the escalation.

The surge at Nobitex was more pronounced than the broader market movement, highlighting the exchange’s importance as a liquidity hub for Iranian crypto users.

Three Main Drivers Identified by Chainalysis

Chainalysis outlined three plausible explanations for the increase in outflows from Iranian exchanges.

First, individual users appear to have transferred assets from centralized exchanges to personal wallets. In previous periods of unrest, including protest waves in 2025, bitcoin withdrawals to self-custodial wallets increased as citizens sought to maintain control over their funds. The February 28 activity reflects a similar pattern, with users moving assets amid concerns about instability and potential restrictions.

Second, exchanges themselves may have shifted funds between wallets. Chainalysis noted that operational fund cycling can occur to manage liquidity or obscure internal activity. This practice gained urgency after a 2025 hack of Nobitex in which more than $90 million in assets were stolen. In times of crisis, exchanges may increase internal transfers to maintain operational resilience.

Third, some transfers could involve state-aligned actors using domestic platforms for cross-border trade, sanctions evasion, or proxy financing. Chainalysis stated that distinguishing between retail-driven outflows and state-linked activity requires deeper wallet-level analysis over time. In the immediate aftermath of the strikes, the motives behind individual transactions remain difficult to separate.

Parallels With Earlier Protest-Driven Withdrawals

The recent spike resembles patterns observed earlier in 2026. During anti-regime protests in January, bitcoin withdrawals from Iranian exchanges surged in anticipation of government-imposed internet blackouts. Activity then plateaued while connectivity restrictions were in place and resumed once access was restored.

The February 28 airstrikes appear to have triggered a comparable sequence. Outflows climbed sharply following the attacks, reflecting a rapid response by users to geopolitical developments. Past data cited by Chainalysis shows that Iranian crypto activity often responds directly to domestic events, with increases in both trading volumes and withdrawals during periods of uncertainty.

Implications for Users Moving Funds Internationally

Elliptic’s tracing of funds to overseas exchanges indicates that a portion of the capital left Iranian platforms for foreign destinations. For users, this means that centralized exchanges inside the country served as a bridge between the domestic currency and international crypto markets.

Nobitex’s transaction volume of $7.2 billion in 2025 underlines its role in facilitating such flows. With more than 11 million users, movements on this platform can materially affect on-chain activity levels linked to Iran.

For international observers, including users of crypto-based financial and betting platforms, the data illustrates how geopolitical events can rapidly influence exchange balances, wallet transfers, and cross-border crypto flows. On-chain analytics firms such as Chainalysis and Elliptic provide transaction-level visibility into these shifts, though attribution of motives remains complex.

Our Assessment

On-chain data from Chainalysis and Elliptic shows that the February 28, 2026 airstrikes in Tehran were followed by a measurable increase in cryptocurrency outflows from Iranian exchanges, totaling about $10.3 million within days. Nobitex recorded a 700 percent surge in withdrawals, with funds traced in part to overseas exchanges. The activity aligns with previously documented patterns in Iran, where domestic unrest and geopolitical shocks coincide with higher trading volumes and increased transfers to self-custody and foreign platforms. The data highlights the responsiveness of Iran’s crypto ecosystem to sudden political and military developments.