WASHINGTON — The $1.4 million that ISIS-K raised from cryptocurrency donors across Central Asia, Europe, and the Gulf over two years moved quietly, a few hundred dollars at a time, through Tron network wallets built to resemble ordinary digital accounts. On Tuesday, 131 of those wallets went dark.
The United States Treasury Department’s Office of Foreign Assets Control added 134 cryptocurrency addresses linked to ISIS-Khorasan to its Specially Designated Nationals list on July 1, 2026. Of those, 131 were Tron-based wallets; the remaining three held Monero, a privacy coin whose architecture makes tracing and freezing funds technically impossible. Tether, the largest dollar-pegged stablecoin issuer by market capitalization, froze the assets in the Tron addresses within hours of the designation, according to Cointelegraph.
The action marks the second round of ISIS-K-linked crypto enforcement in ten days. On June 22, OFAC had targeted three individuals and six entities tied to the group’s financial network, including Syria-based cryptocurrency exchanges used to aggregate donations and convert them into cash for operational use. Tuesday’s designation went further, targeting the wallets directly. It is a step OFAC reserves for cases where the blockchain forensic trail is strong enough to withstand legal challenge.
That trail was assembled by Chainalysis, the New York blockchain analytics firm whose analysis has underpinned the majority of significant terrorism-financing prosecutions in US federal court over the past four years. According to the company’s July 2 report, the 131 Tron addresses had received approximately $1.4 million since 2023 and sent out more than $880,000, with funds routed through exchange accounts in Syria, Turkey, and the Gulf that OFAC has since designated. A parallel Chainalysis submission helped Indonesian prosecutors secure terrorism financing convictions in April, the first Southeast Asian case to rely on on-chain forensic evidence as primary proof at trial.
The Tron network’s transparency is what made ISIS-K’s fundraising apparatus so easy to document. Tron markets itself on low transaction fees and high throughput, advantages that made small, frequent donations cheap and fast for a globally dispersed donor base. But those characteristics run on a fully public ledger. Every transaction is permanently recorded and traceable by any firm with the analytics tools to read it. ISIS-K built a donation network that documented its own activity.
Tether’s decision to freeze the designated accounts was discretionary. No US law currently compels stablecoin issuers to honor OFAC designations in real time. The freeze demonstrates how quickly a cooperative stablecoin issuer can shut down a terrorism financing network once the targets have been forensically identified. Tether had demonstrated the same capability in a different jurisdiction after OFAC’s sanctions against Iran’s dominant cryptocurrency exchange Nobitex: in April, it froze an estimated $344.2 million linked to the Central Bank of Iran, which TRM Labs described as the largest on-chain freeze of sovereign crypto reserves ever recorded.
That track record carries implications for the regulatory debate now reaching its deadline in Washington. America’s $322 billion stablecoin market awaits final rules under the GENIUS Act’s stablecoin rulemaking, which faces a July 18 statutory deadline with six federal agencies resolving conflicts over yield prohibitions, run-risk architecture, and the Federal Reserve’s still-absent implementing framework. Treasury officials have pointed to voluntary compliance from Tether as evidence that integrating dollar-denominated stablecoins into formal financial architecture extends American sanctions enforcement into jurisdictions beyond the banking system.
What OFAC has not addressed is the Monero problem. Unlike Tron, the Monero protocol obscures sender, receiver, and transaction amount at the cryptographic layer. Chainalysis cannot trace those three addresses. Tether holds no Monero to freeze. No exchange can identify whether the funds moved before the designation was published. The three Monero addresses sit on the SDN list and bar US persons from transacting with them. The practical enforcement effect, for anyone already holding those funds in Monero, is effectively zero.
Also unresolved: whether the Syria-based exchanges ISIS-K used to convert Tron donations into operational cash will receive their own SDN designations in a third enforcement round. OFAC did not respond to questions about either point before publication.
The 134 designations confirm what blockchain forensics firms had documented for nearly three years. ISIS-K assembled a functioning cryptocurrency fundraising apparatus that crossed jurisdictions, used multiple networks, and moved money reliably despite conventional financial pressure. The $880,000 in confirmed outflows represents operational money, funds that moved from wallets to exchange accounts and then to cash, in the hands of a group the United States has designated as a Specially Designated Global Terrorist since September 2015.
Whether those funds financed recruitment, logistics, or future attacks cannot be determined from the blockchain record alone. The three Monero addresses remain unanswered.
