Iran's Islamic Revolutionary Guard Corps (IRGC) demonstrated a resilient cryptocurrency infrastructure that continued to operate amid the country's nationwide internet blackout following U.S.-Israeli strikes on February 28, 2026. Cyber intelligence reports indicate that during this blackout, the IRGC managed to facilitate the movement of hundreds of millions of dollars in cryptocurrency out of the country. Experts from RAKIA, a cyber intelligence firm, observed a marked spike in funds leaving Iranian-linked crypto accounts. The surge began in the initial hours after the conflict commenced, escalating rapidly from tens of millions to several hundred millions in a short period. In 2025 alone, wallets associated with the IRGC reportedly received over $3 billion in cryptocurrency, highlighting a robust financial ecosystem operating despite severe international sanctions and communication blackouts. Omri Raiter, founder and CEO of RAKIA, emphasized that this activity indicates Iran's capacity to sustain proxy operations by utilizing digital currencies that sanctions were intended to restrict. This financial resilience may provide Iran with the necessary resources to fund its operations and bolster its geopolitical strategies amid ongoing tensions. The reports also indicated that serious coordination was evident in the cryptocurrency flows associated with networks linked to Iranian-backed groups. As Raiter noted, specific accounts were identified as being tied to regions traditionally associated with financing proxy conflicts, notably Lebanon and Yemen, highlighting a concerning nexus of financial activities. Simultaneously, RAKIA's investigation reflected a network of over 1,100 active cryptocurrency nodes operating within Iran, demonstrating a sophisticated infrastructure capable of functioning even when the general populace was cut off from the internet. The implications of this development are significant. The U.S. Treasury Secretary Scott Bessent remarked that halting Iranian financial networks remains a priority, reiterating the commitment to monitor and pursue individuals and entities that exploit cryptocurrency to circumvent sanctions. This situation underscores the evolving landscape of crypto finance's role in state-sponsored activities, further complicating the international community's efforts to impose sanctions and control illicit financial flows. The confluence of proxy funding and the capital flight represents a dual threat that necessitates a strategic response from policymakers worldwide.