Iran-linked Bitcoin activity fell about 80%, then rebounded during the blackout

By the end of Iran's prolonged February-to-May 2026 internet shutdown, Bitcoin transaction activity in Chainalysis's selected everyday-use series had recovered to over 75% of its baseline after an initial fall of around 80%, the blockchain analytics company reported Oct. 26.

The rebound developed while the blackout was still in place. Some Iran-attributed activity was reaching the network during severe restrictions, while the number of people with dependable access to their funds remains unmeasured.

The findings come from Chainalysis's new Middle East and North Africa analysis, covering July 2025 through June 2026. Independent traffic observations from Cloudflare document the prolonged disruption and its partial easing.

The longer shutdown began Feb. 28. Cloudflare observed traffic from Iran fall to well under 1% of previous levels, while Chainalysis reports that Bitcoin transaction activity initially fell around 80%.

The two series then followed different courses. Chainalysis says Bitcoin activity gradually climbed during the restriction period, reaching over 75% of its baseline by the blackout's end. After restrictions began easing in late May, activity rose to nearly twice baseline.

Cloudflare's account of the May reconnection, published May 27, records the subsequent network change. It observed a marked rise in traffic and DNS queries beginning around 11 a.m. UTC on May 26, 87 days after the second shutdown began, and described a partial restoration.

At its May 26 peak, traffic reached only 40% of the maximum Cloudflare had observed earlier in 2026. IPv6 traffic remained effectively zero.

January provides a shorter comparison. Chainalysis reports nearly 90% fewer Bitcoin transactions in the first week of that blackout than in its baseline period, followed by activity exceeding baseline when restrictions lifted. Cloudflare dates the first shutdown to Jan. 8, with brief traffic returns on Jan. 21 and Jan. 25 before fuller recovery began Jan. 27.

The percentages have different denominators. Cloudflare measures traffic across its network and DNS activity; Chainalysis reports Bitcoin transaction activity against its own baseline. Dividing them would not produce a measure of Bitcoin's relative resilience or the share of Iranians who could connect.

A transaction count cannot reveal whether access broadened across households or became concentrated among a smaller group that could transact repeatedly. The Iran analysis does not specify exact baseline dates, unique-holder counts or repeat-wallet concentration. Its approximate percentage comparisons remain Chainalysis's reported estimates.