TL;DR
- Low-cost, commercially available drones have become central to modern conflict, allowing state and non-state actors, such as pro-Russia militias and Iran-backed terrorist organizations, to project power affordably.
- Drone procurement networks of state-backed actors increasingly intersect with the blockchain, which raises compliance challenges given the dual-use nature of drone technology.
- Pro-Russia volunteer groups have successfully raised millions in crypto across various blockchains to purchase UAVs and associated components from global e-commerce platforms.
- Analysis of sanctioned manufacturers like KB Vostok reveals how blockchain data can shed light on nation-state buyers of interest. In particular, analysis of transactional patterns can empower investigators to identify unit sales and gain insight into state-adjacent supply chains.
- Comprehensively sanctioned states, such as Iran, are using cryptocurrency to advertise and procure strategic military hardware to further ‘sanctions-proof’ arms acquisitions.
Drones have rapidly emerged as a central tool of modern armed conflict, reshaping how both state and non-state actors project power. In eastern Ukraine, commercially available quadcopters have been repurposed for frontline combat, while in the Red Sea and Strait of Hormuz, one-way attack UAVs have disrupted critical maritime routes and global commerce. These systems offer a compelling combination of low cost, operational flexibility, and plausible deniability, lowering the barrier to entry for asymmetric warfare.
As with any scalable weapons ecosystem, the proliferation of drones depends not only on access to hardware, but also on the financial infrastructure that enables procurement. While the vast majority of drone purchases still occur via traditional financial rails, these procurement networks increasingly intersect with the blockchain. This shift has introduced new challenges and opportunities for monitoring illicit activity, as cryptocurrency’s transparent and immutable nature has enabled the tracing of procurement flows, and improved understanding of how emerging technologies are reshaping the economics of conflict.
The dual-use conundrum
By definition, drones are a dual-use technology. A DJI Mavic used by a wedding photographer is functionally identical to one modified to drop a grenade on a forward operating position. Drone parts, such as motors, flight controllers, cameras, and batteries, are commercially available on global e-commerce platforms and are not inherently illicit.
In practice, cryptocurrency enters the drone procurement picture in two ways. The first is direct: a drone manufacturer openly accepts cryptocurrency on its website as a payment method — the KB Vostok case, discussed below, is the clearest public example. The second is indirect: electronics and dual-use component vendors selling through third-party e-commerce platforms such as Alibaba accept crypto to sell drones and drone parts to buyers whose identities and end use intentions are opaque. Blockchain analysis provides crucial insights into the possible end use cases for buyers. The sections below show how liquidity source and transfer volume analysis can help investigators identify potential Iranian or Russia-linked state actors behind drone and drone part purchases.
Crowdfunding the frontline
The most publicly visible crypto-drone nexus operates at the militia level, through open crowdfunding campaigns on social media platforms. Beginning in the early months of Russia’s full-scale invasion of Ukraine in 2022, we identified dozens of pro-Russia volunteer and paramilitary organizations soliciting cryptocurrency donations for military equipment. Together, these groups raised over $8.3 million in cryptoassets. Drones were among the explicitly itemized purchases. One solicitation post described a campaign targeting enough rubles to purchase a reconnaissance drone. Another published a delivery manifest that included UAV components costing approximately 200,000 rubles (roughly $3,400) alongside radios, medical supplies, and weapon-cleaning kits.
The striking point is not the dollar figure, but the logic. At the militia level, low-cost commercial drones are among the most tactically significant items crowdfunded crypto can buy. At $2,200–$3,500 per unit, a single successful fundraising campaign translates directly into battlefield capability for groups that cannot access conventional finance.
These groups typically source components and whole drones through general electronics platforms and commercial resellers, the same global e-commerce infrastructure used by hobbyists and commercial operators. Resellers and manufacturers list drone parts openly; what transforms a legitimate commercial purchase into a sanctions or national security concern is who is purchasing the drone and what they are using it for.
The below screenshot shows a Russian militia fundraising group referencing the utility of Chinese manufactured drones. This group has historically crowdfunded supplies for Russian militia groups operating in eastern Ukraine.
What’s more, the same Russian militia fundraising group posting on social media about the utility of Chinese-made drones can be observed on-chain making purchases from a Hong Kong-based drone manufacturer. Other on-chain evidence shows drone purchasers acquiring liquidity from Russian-language no-KYC exchanges, the sanctioned Russian exchanges Garantex and Grinex, and a Federation Tower-based OTC service. This analysis of drone purchasers and their liquidity sources strongly suggests that Russia-linked actors may have procured drones from Chinese manufacturers for deployment in Ukraine.
More generally, the liquidity source for a drone purchaser provides insight into whether its end use is intended for licit or illicit purposes. Purchasers receiving liquidity from illicit sources, such as sanctioned entities, Russian-language no-KYC swap services, and entities operating in sanctioned jurisdictions can suggest end use cases by nation-state actors such as Iran or Russia and their proxies. As shown in the chart below, inflows to our sample of drone vendors originate to differing degrees from illicit sources, with the share of total inflows ebbing and flowing over time.
How on-chain data shed light on drone manufacturers
A second and more analytically significant layer involves drone manufacturers themselves. These entities are not resellers of commercial components, but rather dedicated UAV developers with targeted military markets and, in at least one case, a publicly visible crypto payment channel. In 2024, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) designated two Russian UAV developers: OKO Design Bureau (May 2024) and KB Vostok, also known as Vostok Design Bureau (August 2024). Both entities solicited cryptocurrency on public channels, but while OKO Design Bureau raised under $1,000, KB Vostok’s public footprint offers far deeper insights. Their fundraising efforts allow for a direct comparison between on-chain movements and the known costs of their hardware.
What pricing reveals about counterparties
KB Vostok designed the Scalpel, a one-way attack UAV with a payload capacity of up to five kilograms, priced at approximately 200,000 rubles (roughly $2,200) per unit. Russian press reporting described the Scalpel as notable for its simplicity of production and affordability relative to other UAVs in its class. That price point is analytically significant: at $2,200, the Scalpel sits in a range where individual unit purchases are plausible in round-number transactions, and where patterns of repeat purchasing become observable on-chain.
OFAC’s designation included a wallet address KB Vostok had published on its website.
Our analysis of that wallet revealed a pattern inconsistent with a donation campaign:
- 18 deposits received by the KB Vostok SDN-listed address
- 16 of 18 deposits traced to a single counterparty, with amounts frequently matching Scalpel unit price or multiples thereof
- ~$40M in total transfers processed by that single counterparty since January 2023
- >$100M processed through Garantex deposit addresses used by that counterparty
The regularity and sizing of the transfers — clustering around $2,200 and clean multiples — is more consistent with recurring unit purchases. The counterparty’s scale suggests an institutional participant, likely a node within Russia’s military supply chain, rather than an individual buyer.
KB Vostok’s use of stablecoins, rather than Bitcoin, is also analytically significant. It reflects a broader shift in illicit crypto finance toward dollar-denominated cryptocurrencies, which offer the price stability suited to commercial procurement. Investigators focused exclusively on Bitcoin flows will miss this layer of activity entirely.
The KB Vostok case is not just instructive for what it shows about one manufacturer. It is a template for how looking at drone vendors on-chain can surface broader procurement networks. By analyzing the source of liquidity flowing into a vendor wallet, investigators can form hypotheses about who the buyers are and where they are operating. Funds sourced from Russian-language no-KYC exchanges suggest Russian buyers. Funds sourced from Iranian-linked services suggest Iranian buyers.
Mapped against known product prices, transaction prices allow investigators to distinguish between a one-time component purchase and a pattern of recurring procurement that may indicate a state-adjacent supply chain. The Reactor graph below depicts the flow of funds from wallets at Garantex as well as several other Russia-related SDNs, including Colonelcassad, to vendors of drones and associated supplies through intermediary wallets.
Iran: From proxy networks to state-level commercialization
The dual-use procurement challenge extends well beyond Russia. Sanctions-constrained actors, including Iranian defense entities and Iran-aligned proxies, need components subject to export controls. Drone parts fit this profile precisely, and Iran’s own Shahed drone program has relied heavily on commercially available components sourced through third-country procurement networks.
A January 2026 Financial Times investigation found that Iran’s Ministry of Defense Export Center (Mindex) was publicly advertising advanced weapons — including Shahed drones, ballistic missiles, and warships — for sale to foreign governments with cryptocurrency as an accepted payment method, in what appears to be one of the first known instances of a nation-state openly advertising strategic military hardware for crypto. Notably, Mindex’s website explicitly addressed buyer concerns about sanctions evasion, stating that Iran’s policies ensure contracts “can be executed,” underscoring crypto is increasingly viewed by heavily sanctioned actors as a deliberate, institutionalized tool of sanctions circumvention, not merely a niche workaround.
As shown in the Reactor graph below, a wallet purchasing drone parts from a Hong Kong-based supplier has direct and indirect liquidity flows from the Iranian exchange Nobitex, IRGC wallets, and OFAC SDN Alireza Derakhshan, an Iranian national designated for facilitating crypto transfers on behalf of the regime.
Against this backdrop, it has been instructive to monitor drone-related transactional activity in real-time, including during periods of active conflict. As depicted in the chart below, inflows to a small subset of drone vendors spiked during the 12-day war between Iran and Israel in June 2025, then returned to pre-war levels when the ceasefire was concluded. While this activity is consistent with a war-time surge in drone-related procurement, it represents only a snapshot of limited vendor activity at a specific moment in time and should not be understood as representative of Iran’s entire drone payment landscape or broader global patterns.
The blockchain as weapons tracker
The ability to track drone purchases on the blockchain represents a meaningful evolution. Each supplier address becomes an investigative anchor: a fixed point from which blockchain analysis can map counterparty relationships, trace liquidity sources, and identify previously unknown nodes in opaque procurement networks.
The most important insight the blockchain offers is not the volume of crypto flowing into drone procurement; those volumes, while real, remain modest relative to the overall financial scale of warfighting. What the blockchain uniquely offers is near-real-time visibility into procurement networks that would otherwise be entirely opaque. Drones are cheap, proliferating, and increasingly central to how states and non-state actors project power. The blockchain is one of the few places where their financing leaves a permanent, actionable trace.
This website contains links to third-party sites that are not under the control of Chainalysis, Inc. or its affiliates (collectively “Chainalysis”). Access to such information does not imply association with, endorsement of, approval of, or recommendation by Chainalysis of the site or its operators, and Chainalysis is not responsible for the products, services, or other content hosted therein.
This material is for informational purposes only, and is not intended to provide legal, tax, financial, or investment advice. Recipients should consult their own advisors before making these types of decisions. Chainalysis has no responsibility or liability for any decision made or any other acts or omissions in connection with Recipient’s use of this material.
Chainalysis does not guarantee or warrant the accuracy, completeness, timeliness, suitability or validity of the information in this report and will not be responsible for any claim attributable to errors, omissions, or other inaccuracies of any part of such material.
