OFAC has listed 30 BTC, ETH, and TRON addresses linked to members of Iran's Mabna Institute, according to a TRM Labs report. According to Foresight News, the addresses have received about $16.8 million since January 2018, and 10 addresses controlled by Keyvan Fayaz received about $15.5 million, or 92% of the total on-chain funds.

Mabna Institute has carried out cyberattacks as a hired hacking group since at least 2013 and has acted for clients including Iran's Islamic Revolutionary Guard Corps. The addresses in the latest action are tied to four defendants.