Can we see Iran's Hormuz tolls on-chain?
Iran said they’re charging vessels a toll to transit the Strait of Hormuz, paid in crypto. That made me wonder:
If the tolls are really being paid in crypto, can we see them on-chain?
OFAC has already marked a handful of IRGC-linked wallets, and we can see them in Tron’s public ledger. So I bugged Claude to pull in data from the blockchain and known vessel data and had it write up a little tool that looks for transfer patterns that could plausibly line up with reported vessel transits.
Some info is known. Some is suggestive. Some is me stretching for the toll payment system story. I’ve tried to be clear in the tool about which is which. Here are the highlights:
Things that can verified:
- One address received $7M in a single transfer from an OFAC-designated IRGC wallet in February, weeks before the war. The sending wallet was later frozen by Tether specifically for IRGC links. Think we can say that this is IRGC infrastructure. Doesn’t prove the receiving address handles Hormuz tolls specifically. IRGC may be moving for other reasons, but it’s a starting point.
- Whoever is running the IRGC’s crypto operation is adapting fast. There have been three Tether freeze waves in the last year, and each time, money had already moved to fresh wallets before the freeze landed.
Things that are suggestive, or just might be coincidence:
- On a day when only one vessel was reported to cross the strait, a ~$500K transfer cycle moved through addresses I’d flagged as candidates. On a normal day that’s routine. On a low-traffic day it’s at least interesting. But $500K transfers are extremely common on Tron.
- April 1, the day Iran’s “Strait of Hormuz Management Plan” took effect, had a ~$4.3M flow through a single address in a pattern that looks like a mixer. The timing is interesting. The address isn’t confirmed IRGC.
Things I can’t prove at all, but are fun to think about:
- The addresses I traced look like a toll collection network: front-line collectors, an intermediary hub, consolidation, pipeline back to IRGC wallets. This could be other IRGC operations too.
- One address sends a $1 transfer on every outbound payment. Smells like an automated receipt system. Also smells like any of the thousand other reasons people do $1 test transactions.
Mostly, this was a fun exercise in trying to trace big crypto transactions against world events as they happen.
I’ve probably spent more time and tokens on this than I should have.