A recent investigation into a data leak involving the Iranian cryptocurrency exchange, Ariomex, has raised significant concerns regarding the platform’s potential role in sanctions evasion and large-scale financial transfers. This analysis, conducted by Resecurity and published on Monday, reveals internal records that span from 2022 to 2025, further intensifying scrutiny on Iran’s increasingly digital financial ecosystem.
The data leak occurs at a time when the Iranian economy faces heightened pressure and isolation due to international sanctions. Especially notable is the Central Bank of Iran’s reported acquisition of approximately $507 million worth of Tether’s USDT in January 2026. Analysts speculate that this move aims to stabilize the national currency amid ongoing economic turmoil.
Prior to these revelations, the U.S. Treasury Department had already been targeting cryptocurrency exchanges believed to facilitate transactions for factions like the Islamic Revolutionary Guard Corps (IRGC). This underscores the growing concern about the intersection of digital currencies and illicit activities amidst geopolitical tensions.
### Database Analysis Uncovers High-Risk Transactions
Resecurity’s analysis of a trove of 11,826 verified user records from Ariomex yielded alarming results. Among these records, the company identified 27 users potentially matching names on sanctions lists, but incomplete identification data hindered definitive confirmation of their status. Approximately 7,710 of these records originated in Iran, while the others included users based in countries such as the United States, Germany, France, the Netherlands, and the United Kingdom.
Despite the fact that the majority of transactions on the Ariomex platform involved Tether and Tron—two digital currencies—most of the trades were relatively small. This trend appears to reflect individual attempts to preserve personal savings amidst national currency devaluation. However, the investigation also revealed a concerning number of larger transactions, noting daily transfers ranging from $50,000 to $100,000.
### Large Transfers and High-Value Profiles
The findings from Resecurity expose several cases involving substantial multi-million-dollar transactions. For instance, one user sought to convert a staggering $19 million in cryptocurrency, while others attempted to transfer between $1 million and $5 million, figures that starkly contrast with the average monthly salary of around $400 to $500 in Iran. Such discrepancies raise questions about the source of these funds and the economic conditions enabling such wealth.
Interestingly, the report draws parallels between Ariomex and a previous cyberattack on Nobitex, Iran’s largest crypto exchange, attributed to the hacking group Predatory Sparrow. This breach, which occurred in June 2025, led to a loss of $90 million and highlighted vulnerabilities within the Iranian cryptocurrency sector.
Resecurity also noted that Ariomex has imposed withdrawal limits on most users, restricting them to approximately $30,000 per month and $1,000 per day. However, verified customers can facilitate withdrawals of up to $50,000 monthly. Alarmingly, some high-value accounts seemingly operated with incomplete verification data yet managed significant balances, further complicating the platform’s regulatory landscape.
### Ongoing Support for Regulatory Bodies
Following these revelations, Resecurity has committed to assisting governmental agencies and regulators in their efforts to identify networks that engage in crypto-based sanctions evasion linked to Iran. This initiative aligns with broader international objectives to ensure that digital currencies are not used as conduits for illicit financial activities.
In conclusion, the findings related to Ariomex not only illuminate the complexities of Iran’s evolving reliance on digital assets but also pose significant questions about global regulatory frameworks. As financial systems worldwide grapple with the advent of cryptocurrency, the case of Ariomex serves as a critical reminder of the challenges and risks associated with unregulated exchanges. The implications for international sanctions, financial stability, and regulatory oversight remain a pressing concern in an increasingly digital age.