Reading time: 5 min
Nobitex outflows exploded 700% in the minutes after US-Israeli missiles hit Tehran on February 28. Half a billion rials worth of crypto moved before most Iranians even knew what was happening. Then the internet went dark.
This one hit different. Not because crypto moved during a crisis, that happens every time a headline lands. It hit different because the entire Iranian financial system was already broken before the first strike, and Nobitex was the only exit that still worked. For about ninety minutes, anyway.
The Numbers Tell the Story Before Anyone Else Can
Blockchain analytics firm Elliptic tracked a 700% spike in outgoing transactions from Nobitex within minutes of the coordinated strikes that killed Supreme Leader Khamenei and several senior IRGC commanders. According to Elliptic’s report published Monday, more than $500,000 left the platform in the initial burst, with hourly volumes climbing to nearly $3 million between February 28 and March 1. Nobitex handles over 87% of Iran’s total crypto trading volume according to TRM Labs, serves more than 11 million registered users and processed $7.2 billion in transactions across 2025 alone. That’s not some niche DeFi protocol. That is a country’s financial nervous system.
Chainalysis went wider. Their Monday analysis pegged total outflows from major Iranian exchanges at approximately $10.3 million between February 28 and March 2, with hourly volumes approaching or exceeding $2 million in the hours after the strikes broke. Most of those funds landed in personal wallets or flowed toward overseas mainstream exchanges. Transfer sizes ranged from sub-$100 retail moves all the way up to single transactions exceeding $1 million. Chainalysis was careful to note that from this close to the events, separating retail panic from exchange liquidity management from state-linked activity is nearly impossible. Fair enough. But someone moved seven figures in one shot while missiles were falling. That’s not a retail user protecting their savings.
99% Blackout, and Crypto Still Found a Way
TRM Labs reported that Iran’s internet connectivity collapsed to roughly 1% of normal levels after the strikes began. Trading volume across the entire Iranian crypto ecosystem plunged 80% between February 27 and March 1. But here’s what makes this wild. On-chain activity didn’t stop completely. Arkham Intelligence flagged that Nobitex halted outgoing Ethereum transfers for at least two days, yet TON-based transactions kept moving. Analysts suspect bot activity on TON, not human users. Dogecoin, of all things, currently sits as the largest asset in Nobitex’s reserves. Yes, really.
The infrastructure stress hit every platform simultaneously. Wallex.ir went completely offline, blaming a power outage at the Asiatech data center, the same hosting provider that Nobitex’s leaked source code revealed as part of its own infrastructure. Aban Tether froze both crypto and rial withdrawals. Ramzinex locked deposits and withdrawals while assuring users that cold wallets remained intact. Tabdeal switched to batched withdrawals twice daily and warned of delays up to 24 hours. Iran’s central bank then ordered Nobitex, Wallex, and Tabdeal to suspend trading of the USDT-toman pair, the single most important bridge between crypto and fiat in the country, according to TRM Labs. When that pair reopened, order books were thin and prices dislocated. If you’ve ever tried to sell into a market with no bids, you know what that feels like.
A Platform That Was Already on Fire
Nobitex didn’t enter this crisis from a position of strength. In June 2025, pro-Israel hacker group Predatory Sparrow drained approximately $90 million from the exchange’s hot wallets in a politically motivated attack, according to Elliptic’s analysis. They sent stolen Bitcoin, Ether, Tron, Solana, and Dogecoin to vanity addresses containing anti-IRGC slogans, effectively burning the funds as a message rather than cashing out. Nobitex confirmed the breach, estimating losses closer to $81 million, and pledged to reimburse users through its insurance fund, but the damage to liquidity and confidence was massive. TRM Labs later published a forensic analysis of Nobitex’s leaked source code revealing built-in anti-surveillance modules designed to defeat Western blockchain intelligence tools, VIP routing that bypassed compliance checks, and integration with over 25 blockchain networks.
Elliptic has repeatedly linked Nobitex to IRGC-aligned financial activity and reported in January that Iran’s central bank used the platform to support the collapsing rial, having accumulated at least $507 million in USDT through its wallet network primarily during mid-2025, according to Elliptic’s investigation published in January 2026. Chainalysis estimates that IRGC-linked wallets now account for close to 50% of all on-chain activity within Iran. That number only includes wallets already sanctioned by US and Israeli authorities. The real figure is almost certainly higher.
The Rial Was Already Dead
None of this happened in a vacuum. The Iranian rial hit an all-time low of approximately 1.63 million per dollar on February 19, according to MEXC News reporting, having lost roughly 75% of its value over the prior twelve months. Annual inflation crossed 68% point-to-point by February 2026, per Iran’s own Statistical Center. Cooking oil prices tripled. Meat more than doubled. Bread and cereal costs jumped 142%. In October 2025, Ayandeh Bank, one of Iran’s largest private lenders with 270 branches and billions in deposits, was declared bankrupt after accumulating $5.2 billion in losses and $2.9 billion in debts, as Bloomberg and Al Jazeera reported. The government absorbed it into state-owned Bank Melli, but the damage to public trust in traditional banking was already done. Five more banks were flagged as distressed. For 11 million Nobitex users, crypto wasn’t a speculative bet. It was the only remaining mechanism to preserve purchasing power while every other institution around them crumbled.
The airstrikes didn’t create the demand. They compressed months of slow-motion capital flight into a ninety-minute window. And when the internet went dark, even that window slammed shut. Plan accordingly.
