Audit log

Every state-changing event for Amir Hossein Rad: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

1. #1publishby system:backfill

   2026-06-16 12:10:24Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 426,849,608

   sig

   2hf881Ks1BUR…wq3Rq28Ccopyexplorer ↗

   hash

   8vVeM68gsBks…sjUyp6Lwcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (16636 B) ▸

   {"actor":"system:backfill","investigation_id":"e8d3f545-e0ed-42f0-8fa0-79ef47f530fc","kind":"publish","page_slug":"amir-hossein-rad","published_at":"2026-06-16T12:10:24.394Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Amir Hossein Rad","sections":[{"content":"On June 2, 2026, the U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) added Amir Hossein Rad to the Specially Designated Nationals (SDN) list. He was designated under two executive orders: E.O. 13224 (as amended), which covers counterterrorism and material support for terrorism, and E.O. 13902, which covers persons operating in Iran's financial sector. OFAC cited Rad's role as a 'leader or official' of Nobitex as the basis for the E.O. 13224 designation. The action was part of the Trump administration's 'Economic Fury' campaign, described by Treasury as the largest U.S. crypto-specific enforcement action against Iranian exchange infrastructure to date. Rad was designated alongside Nobitex's current CEO Seyed Ali Khoee and co-founders Seyed Mohammad Ali Aghamir and Seyed Mohammad Aghamir, who are identified as members of the Kharrazi family, described as part of Supreme Leader Khamenei's inner circle.","heading":"OFAC Designation","severity":"critical","sources":[{"credibility":1,"name":"Economic Fury Targets Iran's Largest Digital Asset Exchange for Terror Finance and Sanctions Evasion — U.S. Department of the Treasury","type":"regulatory","url":"https://home.treasury.gov/news/press-releases/sb0519"},{"credibility":2,"name":"OFAC Sanctions Iran's Four Largest Crypto Exchanges: What Every Compliance Team Needs to Know — Scorechain","type":"news_article","url":"https://www.scorechain.com/blog/ofac-iran-crypto-sanctions-june-2026"},{"credibility":2,"name":"OFAC Targets Nobitex and Other Iranian Crypto Exchanges: Compliance Brief — Global Ledger","type":"research","url":"https://blog.globalledger.io/research-investigations/ofac-nobitex-iranian-crypto-exchanges"}]},{"content":"Amir Hossein Rad is a co-founder of Nobitex and served as its CEO before transitioning to the role of chairman. Nobitex, also registered under the corporate alias 'Rahkar Fanavari Nooyan,' is described by the U.S. Treasury as Iran's largest digital asset exchange, with approximately 11 million users. The platform processed more than 50% of all Iranian digital asset inflows in 2025, representing an estimated $4.7 billion in volume for that year. The four Iranian exchanges designated in the June 2026 action — Nobitex, Wallex, Bitpin, and Ramzinex — collectively accounted for approximately $7.7 billion or 78% of Iran's 2025 crypto volume according to TRM Labs analysis. OFAC specifically cited Rad's role in helping Nobitex reconstitute its operations following a $90 million hack in June 2025, treating that recovery effort as evidence of ongoing material support for a designated entity.","heading":"Role at Nobitex","severity":"critical","sources":[{"credibility":1,"name":"Economic Fury Targets Iran's Largest Digital Asset Exchange — U.S. Department of the Treasury","type":"regulatory","url":"https://home.treasury.gov/news/press-releases/sb0519"},{"credibility":2,"name":"Three Enforcement Layers in Five Months: OFAC Designates Iran's Domestic Crypto Exchanges — TRM Labs","type":"research","url":"https://www.trmlabs.com/resources/blog/three-enforcement-layers-in-five-months-ofac-designates-irans-domestic-crypto-exchanges"},{"credibility":2,"name":"US Treasury Sanctions Iran's Largest Crypto Exchange Nobitex — Unchained Crypto","type":"news_article","url":"https://unchainedcrypto.com/us-treasury-sanctions-irans-largest-crypto-exchange-nobitex-along-with-three-other-iranian-platforms-under-economic-fury-campaign/"}]},{"content":"The U.S. Treasury alleged that Nobitex, under leadership that included Rad, facilitated multiple categories of illicit financial activity. These include: processing payments linked to the Islamic Revolutionary Guard Corps (IRGC), including wallets associated with IRGC-affiliated ransomware actors; assisting the Central Bank of Iran in acquiring at least $507 million in stablecoins (primarily USDT) to support Iran's flagging currency, the rial; enabling regime insiders to access international crypto exchanges across multiple jurisdictions; and processing an alleged $2.3 billion since 2023 for sanctioned Iranian entities. Elliptic's independent analysis identified Nobitex blockchain activity connected to addresses associated with Hamas, DPRK-affiliated hacking groups, Syrian actors, and the sanctioned Russian exchange Garantex. All allegations in the OFAC action are based on Treasury findings and have not been adjudicated in a court of law.","heading":"Sanctions Evasion and Terrorist Financing Allegations","severity":"critical","sources":[{"credibility":1,"name":"Economic Fury Targets Iran's Largest Digital Asset Exchange — U.S. Department of the Treasury","type":"regulatory","url":"https://home.treasury.gov/news/press-releases/sb0519"},{"credibility":2,"name":"OFAC Sanctions Nobitex and Three Other Iranian Cryptoasset Exchanges — Elliptic","type":"research","url":"https://www.elliptic.co/blog/ofac-sanctions-nobitex-and-three-other-iranian-cryptoasset-exchanges"},{"credibility":2,"name":"OFAC Sanctions Nobitex and Iranian Cryptocurrency Exchanges — Chainalysis","type":"research","url":"https://www.chainalysis.com/blog/ofac-sanctions-iranian-crypto-exchanges-june-2026/"},{"credibility":2,"name":"US sanctions Nobitex crypto exchange used by Iranian ransomware actors — BleepingComputer","type":"news_article","url":"https://www.bleepingcomputer.com/news/security/the-us-sanctions-nobitex-crypto-exchange-used-by-ransomware/"}]},{"content":"In June 2025, Nobitex suffered a $90 million cyberattack attributed to the pro-Israel hacking group Predatory Sparrow (also known as Gonjeshke Darande). The attackers compromised private keys and transferred funds from Nobitex to multiple vanity addresses containing anti-IRGC slogans — effectively burning the funds as a politically symbolic act rather than retaining them. OFAC's June 2026 designation specifically cited Rad's role in reconstituting Nobitex's operations following this breach. Separately, TRM Labs noted that Nobitex's blockchain address-validation software — a core piece of exchange infrastructure — was authored and updated by co-founder Seyed Mohammad Aghamir 17 times between 2022 and 2024. The exchange's continued operation after the breach and its ongoing transaction volumes were factors in the Treasury's enforcement rationale.","heading":"Nobitex Hack and Post-Breach Operations","severity":"high","sources":[{"credibility":1,"name":"Economic Fury Targets Iran's Largest Digital Asset Exchange — U.S. Department of the Treasury","type":"regulatory","url":"https://home.treasury.gov/news/press-releases/sb0519"},{"credibility":1,"name":"Pro-Israel hackers take credit after $90 million stolen from Iran's largest crypto exchange — CNN","type":"news_article","url":"https://www.cnn.com/2025/06/18/middleeast/pro-israel-hackers-iran-crypto"},{"credibility":2,"name":"Iranian crypto exchange Nobitex hacked for over $90 million by pro-Israel group — Elliptic","type":"news_article","url":"https://www.elliptic.co/blog/iranian-crypto-exchange-nobitex-hacked-pro-israel-group"},{"credibility":2,"name":"Inside the Nobitex Breach: What the Leaked Source Code Reveals — TRM Labs","type":"research","url":"https://www.trmlabs.com/resources/blog/inside-the-nobitex-breach-what-the-leaked-source-code-reveals-about-irans-crypto-infrastructure"}]},{"content":"The OFAC designation of Rad and Nobitex carries broad secondary sanctions exposure. Under E.O. 13902, foreign financial institutions and non-U.S. persons that conduct significant transactions with designated entities face correspondent account restrictions and potential secondary designation. Scorechain and Crystal Intelligence both noted that under OFAC's 50% ownership rule, any entity in which a designated person holds 50% or more ownership is itself considered blocked, even if not explicitly named on the SDN list. The collective $40 billion in cryptoasset transactions processed by the four designated exchanges, as calculated by Elliptic, underscores the scale of potential compliance exposure for any counterparties that interacted with Nobitex wallets.","heading":"Secondary Sanctions and Compliance Risk","severity":"high","sources":[{"credibility":2,"name":"OFAC Sanctions Nobitex and Three Other Iranian Cryptoasset Exchanges — Elliptic","type":"research","url":"https://www.elliptic.co/blog/ofac-sanctions-nobitex-and-three-other-iranian-cryptoasset-exchanges"},{"credibility":2,"name":"Crypto Sanctions Screening: OFAC Targets Iran Exchanges — Crystal Intelligence","type":"research","url":"https://crystalintelligence.com/sanctions/crypto-sanctions-screening-ofac-targets-iran-exchanges/"},{"credibility":2,"name":"OFAC Sanctions Iran's Four Largest Crypto Exchanges — Scorechain","type":"news_article","url":"https://www.scorechain.com/blog/ofac-iran-crypto-sanctions-june-2026"}]},{"content":"The June 2, 2026 designation of Rad and Nobitex was the third enforcement action targeting Iran's crypto ecosystem within a five-month period, according to TRM Labs. Earlier actions in the same campaign included January 2026 designations of IRGC-linked exchanges and April 2026 sanctions on Central Bank of Iran wallets. The broader 'Economic Fury' campaign represents a significant escalation in U.S. efforts to use crypto-specific enforcement tools to constrain Iranian financial infrastructure. This was the first time Iran-incorporated digital asset exchanges were named directly to the SDN list. The action also targets the Kharrazi family network — co-founders Ali and Mohammad Aghamir are identified as members of this family, which is described as part of Supreme Leader Khamenei's inner circle — indicating that Treasury viewed Nobitex as embedded within Iran's political and security apparatus rather than a commercially independent enterprise.","heading":"Broader Enforcement Context","severity":"high","sources":[{"credibility":2,"name":"Three Enforcement Layers in Five Months: OFAC Designates Iran's Domestic Crypto Exchanges — TRM Labs","type":"research","url":"https://www.trmlabs.com/resources/blog/three-enforcement-layers-in-five-months-ofac-designates-irans-domestic-crypto-exchanges"},{"credibility":2,"name":"US sanctions Nobitex and other Iranian crypto exchanges under Economic Fury campaign — The Block","type":"news_article","url":"https://www.theblock.co/post/403436/us-sanctions-nobitex-iranian-crypto-exchanges-economic-fury-campaign"},{"credibility":2,"name":"From banks to blockchains: US opens new front in Iran sanctions — Iran International","type":"news_article","url":"https://www.iranintl.com/en/202606055401"}]}],"sources_used":[{"credibility":1,"name":"Economic Fury Targets Iran's Largest Digital Asset Exchange for Terror Finance and Sanctions Evasion — U.S. Department of the Treasury","type":"regulatory","url":"https://home.treasury.gov/news/press-releases/sb0519"},{"credibility":2,"name":"OFAC Sanctions Iran's Four Largest Crypto Exchanges: What Every Compliance Team Needs to Know — Scorechain","type":"news_article","url":"https://www.scorechain.com/blog/ofac-iran-crypto-sanctions-june-2026"},{"credibility":2,"name":"OFAC Targets Nobitex and Other Iranian Crypto Exchanges: Compliance Brief — Global Ledger","type":"research","url":"https://blog.globalledger.io/research-investigations/ofac-nobitex-iranian-crypto-exchanges"},{"credibility":2,"name":"OFAC Sanctions Nobitex and Iranian Cryptocurrency Exchanges — Chainalysis","type":"research","url":"https://www.chainalysis.com/blog/ofac-sanctions-iranian-crypto-exchanges-june-2026/"},{"credibility":2,"name":"OFAC Sanctions Nobitex and Three Other Iranian Cryptoasset Exchanges — Elliptic","type":"research","url":"https://www.elliptic.co/blog/ofac-sanctions-nobitex-and-three-other-iranian-cryptoasset-exchanges"},{"credibility":2,"name":"Three Enforcement Layers in Five Months: OFAC Designates Iran's Domestic Crypto Exchanges — TRM Labs","type":"research","url":"https://www.trmlabs.com/resources/blog/three-enforcement-layers-in-five-months-ofac-designates-irans-domestic-crypto-exchanges"},{"credibility":2,"name":"US Treasury Sanctions Iran's Largest Crypto Exchange Nobitex Along With Three Other Iranian Platforms — Unchained Crypto","type":"news_article","url":"https://unchainedcrypto.com/us-treasury-sanctions-irans-largest-crypto-exchange-nobitex-along-with-three-other-iranian-platforms-under-economic-fury-campaign/"},{"credibility":1,"name":"Pro-Israel hackers take credit after $90 million stolen from Iran's largest crypto exchange — CNN","type":"news_article","url":"https://www.cnn.com/2025/06/18/middleeast/pro-israel-hackers-iran-crypto"},{"credibility":2,"name":"Inside the Nobitex Breach: What the Leaked Source Code Reveals About Iran's Crypto Infrastructure — TRM Labs","type":"research","url":"https://www.trmlabs.com/resources/blog/inside-the-nobitex-breach-what-the-leaked-source-code-reveals-about-irans-crypto-infrastructure"},{"credibility":2,"name":"Crypto Sanctions Screening: OFAC Targets Iran Exchanges — Crystal Intelligence","type":"research","url":"https://crystalintelligence.com/sanctions/crypto-sanctions-screening-ofac-targets-iran-exchanges/"},{"credibility":2,"name":"US sanctions Nobitex and other Iranian crypto exchanges under Economic Fury campaign — The Block","type":"news_article","url":"https://www.theblock.co/post/403436/us-sanctions-nobitex-iranian-crypto-exchanges-economic-fury-campaign"},{"credibility":2,"name":"Iranian crypto exchange Nobitex hacked for over $90 million by pro-Israel group — Elliptic","type":"news_article","url":"https://www.elliptic.co/blog/iranian-crypto-exchange-nobitex-hacked-pro-israel-group"},{"credibility":2,"name":"From banks to blockchains: US opens new front in Iran sanctions — Iran International","type":"news_article","url":"https://www.iranintl.com/en/202606055401"}],"summary":"Amir Hossein Rad is the chairman, co-founder, and former CEO of Nobitex, Iran's largest cryptocurrency exchange. On June 2, 2026, OFAC personally designated Rad under Executive Orders 13224 and 13902 for his leadership role at an exchange the U.S. Treasury accused of enabling sanctions evasion, supporting the Islamic Revolutionary Guard Corps (IRGC), and facilitating terrorist financing. He was among four individuals designated alongside the exchange itself as part of the Trump administration's 'Economic Fury' campaign targeting Iran's financial infrastructure.","timeline":[{"date":"2022-01-01","event":"Nobitex co-founder Seyed Mohammad Aghamir begins a series of 17 updates to the exchange's core address-validation software, continuing through 2024, according to TRM Labs analysis of leaked source code.","source":"TRM Labs","source_url":"https://www.trmlabs.com/resources/blog/inside-the-nobitex-breach-what-the-leaked-source-code-reveals-about-irans-crypto-infrastructure"},{"date":"2025-06-18","event":"Nobitex suffers a $90 million hack attributed to the pro-Israel hacking group Predatory Sparrow (Gonjeshke Darande). Stolen funds are transferred to vanity addresses containing anti-IRGC slogans, effectively burning the assets. OFAC later cites Amir Hossein Rad's role in reconstituting the exchange's operations after this breach.","source":"CNN / Elliptic","source_url":"https://www.cnn.com/2025/06/18/middleeast/pro-israel-hackers-iran-crypto"},{"date":"2026-01-01","event":"OFAC issues the first enforcement layer of the Economic Fury campaign, designating IRGC-linked cryptocurrency exchanges.","source":"TRM Labs","source_url":"https://www.trmlabs.com/resources/blog/three-enforcement-layers-in-five-months-ofac-designates-irans-domestic-crypto-exchanges"},{"date":"2026-04-01","event":"OFAC issues the second enforcement layer, sanctioning Central Bank of Iran cryptocurrency wallets.","source":"TRM Labs","source_url":"https://www.trmlabs.com/resources/blog/three-enforcement-layers-in-five-months-ofac-designates-irans-domestic-crypto-exchanges"},{"date":"2026-06-02","event":"OFAC designates Amir Hossein Rad to the SDN list under E.O. 13224 and E.O. 13902, alongside Nobitex (Iran's largest crypto exchange), Wallex, Bitpin, Ramzinex, and three other Nobitex executives. This is the third and largest enforcement layer of the Economic Fury campaign targeting Iran's crypto ecosystem.","source":"U.S. Department of the Treasury","source_url":"https://home.treasury.gov/news/press-releases/sb0519"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 7f76ee14-cece-40c6-80de-479326a6a7eecopy