What Happened
In late December 2025, protests erupted across Iran after the rial collapsed to new lows and consumer prices surged. Demonstrations began with shop closures and rallies at Tehran's Grand Bazaar and spread to multiple provinces. On January 8, 2026, the government imposed a near-total internet blackout to suppress coordination and limit outside reporting. Human rights organizations documented mass arrests and lethal force in several cities.
On-chain data published by Chainalysis tells a parallel story. Comparing the pre-protest window of November through late December 2025 to the period from December 28 through January 8, the firm documented a sharp increase in Bitcoin withdrawals from Iranian exchanges to personal, unattributed wallets. The increase hit across all transaction size brackets, but was strongest among everyday users. Sub-$10,000 withdrawals rose over 230% in average daily dollar value and over 260% in transaction count. Sub-$1,000 withdrawals rose over 220% in value and over 120% in count. Even the smallest bracket, under $100, saw transaction counts rise nearly 80%. The pattern Chainalysis describes is not elite capital flight. It is broad-based defensive behavior by ordinary people.
After the February 28, 2026 U.S.-Israeli airstrikes, the same pattern triggered again. Chainalysis recorded roughly $10.3 million in crypto outflows from major Iranian exchanges between February 28 and March 2. Elliptic reported that outflows from Nobitex, Iran's largest exchange, surged approximately 700% within minutes of the first strikes. Nearly 60% of wallets that withdrew funds during the January period still hold those funds, suggesting a long-term transition to self-custody rather than immediate conversion.
The State Went the Other Direction
While civilians moved toward Bitcoin in personal wallets, Iran's state apparatus moved toward stablecoins. Chainalysis' 2026 Crypto Crime Report documents IRGC-associated addresses receiving over $3 billion in crypto in 2025, up from $2 billion the year prior. The dominant instrument was stablecoins, primarily USDT, which function as synthetic dollars on blockchain rails without touching the traditional banking system. Elliptic reported in January 2026 that Iran's central bank had acquired at least $500 million in U.S. dollar stablecoins. State-linked actors use them for sanctions-related procurement, cross-border payments, and proxy network financing.
In January 2026, OFAC sanctioned two UK-registered exchanges, Zedcex and Zedxion, for facilitating transactions on behalf of IRGC-linked networks. Chainalysis noted those platforms had processed tens of billions of dollars in Iran-aligned transactions before being designated. The picture that emerges is of a regime that has effectively built a parallel financial infrastructure using stablecoins, while simultaneously tolerating a domestic Bitcoin market it cannot fully control.
What Bitcoin Just Proved About Itself
The Iran data is the OPNorange thesis run as a live experiment. Not in theory. Not in a white paper. In a country where the rial lost roughly 90% of its value since 2018, where inflation runs between 40% and 50%, where the government cuts off the internet when citizens protest, and where state-linked actors control over half the domestic crypto economy.
In that environment, ordinary Iranians chose Bitcoin in self-custody. Not because they were speculating on price. Because self-custody Bitcoin is the one financial instrument the state cannot freeze, the one asset that still moves when connectivity is cut, the one store of value that cannot be inflated away by a central bank. Chainalysis frames it plainly: 'For the average Iranian, bitcoin has become a censorship-resistant asset that offers financial flexibility in an authoritarian and highly volatile environment.'
This distinction, civilians to Bitcoin and the state to stablecoins, matters beyond Iran. Stablecoins are programmable, freezable, and ultimately dependent on the issuer's compliance with government requests. Tether has frozen wallets on OFAC instruction before. A stablecoin is synthetic dollar access with a backdoor. Bitcoin in self-custody has no issuer, no administrator, and no freeze function. That difference is not academic when the government controls the banking system and the internet switch.
What This Means for You
Bitcoin hit $75,000 this morning, bouncing from a low of approximately $63,000 in February during the height of the Iran-Israel conflict. The recovery came as Strait of Hormuz tensions eased and the first commercial tankers transited since hostilities began. That price action is interesting. What happened inside Iran during the same period is more interesting.
The Iran case reinforces a principle this site is built on: self-custody is not an advanced feature for technical users. It is the baseline capability that makes Bitcoin meaningfully different from any other asset. An Iranian on a phone with a hardware wallet or a mobile self-custody wallet held something real during the blackout. An Iranian with funds on a domestic exchange held a claim that was temporarily inaccessible and permanently at risk. The technical setup is the same globally. The stakes just vary by jurisdiction.
Watch this pattern. Every major shock in Iran produces the same on-chain signal. Citizens anticipate the crackdown and move first. The window between 'stability deteriorating' and 'blackout imposed' is the window that matters. That sequence has now repeated through protests, airstrikes, and war. It is no longer anecdotal.
What to Watch
Chainalysis has flagged the February 28 airstrike outflows as too recent to fully attribute, with funds still moving onward. Further wallet-level tracking over the coming weeks will sharpen whether the current flows are primarily retail self-custody, exchange infrastructure shuffling, or state-linked activity. Watch also for any OFAC action targeting additional Iranian exchange infrastructure, following the Zedcex and Zedxion designations in January.