US Sanctions Mabna Wallets, Raises Crypto Exposure

The US sanctioned five people linked to Iran’s Mabna Institute on August 24 and the Justice Department had already indicted 17 defendants on August 18 for years of cyber-espionage targeting 144 US universities, 178 foreign universities, companies, government agencies, and NGOs. Treasury’s OFAC also published 30 crypto addresses tied to four of the defendants. That matters because the named Bitcoin, Ethereum, and TRON wallets are now toxic to touch: exchanges, custodians, payment firms, and other counterparties can create sanctions exposure by processing funds that pass through them. TRM Labs said the addresses hold about $16.8 million and that some flows show exchange cash-out patterns that can obscure the source of funds. For crypto compliance teams, the case is no longer just attribution to an Iranian hacking group. If your screening or custody workflows touch these wallets or related transaction paths, the exposure shifts from intelligence to secondary-sanctions risk, and the reporting does not settle how far linked-flow screening must reach.

Part of the PlainSec briefing for 2026-08-25

Every edition of this story: US Sanctions Mabna Wallets, Raises Crypto Exposure

Sources