Zero Exports, Zero Evidence: An Audit of the CENTCOM Blockade Claim

Zero

That is the claim. Not "reduced." Not "constrained." Not "degraded by forty percent year over year." Zero.

A four-star commander at US Central Command told a reporter that a blockade is in place and that it has stopped Iran from exporting any oil. The sentence is nine words long. It contains no vessel count, no tonnage figure, no date range, no named buyer, no named port, no enforcement statistic, and no way to check it.

I have spent twenty-seven years reading claims like this. Not military communiqués specifically — assertions of security, of solvency, of correctness. I audit them. The methodology does not change with the uniform. You take the assertion, you separate it into its verifiable components, you attempt reconciliation against an independent record, and you issue an opinion.

The independent record here is unusually good. Not because the Pentagon publishes it. Because the trade this blockade claims to have eliminated settles through instruments I can inspect, on rails that sign every movement, and through vessels that broadcast their position until the moment they choose not to.

The ledger does not lie, only the interpreters do. That sentence is not a slogan. It is a procedural rule. The ledger in this case has two halves: the maritime half, which is AIS telemetry and port-call records, and the financial half, which is a mix of SWIFT-substitute bank messaging, barter documentation, and a residual stablecoin leg that lands on public chains and stays there forever.

Both halves are queryable. Neither half has been queried by anyone quoted in the story.

So the claim sits there, absolute and unsupported, in the exact syntactic shape of every failed audit opinion I have ever rejected. The shape is: high certainty, low granularity. Real evidence runs the other way. It is granular, hedged, and boring. It comes with caveats and confidence intervals and a statement of scope limitations.

"Zero" comes with nothing. That is the first red flag, and it is the one most readers will miss, because certainty reads as competence. In my line of work, certainty reads as an unfinished workpaper.

The rest of this article is the workpaper. I am going to do to this claim what I would do to a protocol that announced, on Twitter, that it had achieved "zero exploits."

Demand the hashes.

Context: The Two Legs of a Trade That Refuses to Die

Start with the arithmetic, because the arithmetic frames everything.

The Strait of Hormuz carries roughly a fifth of the world's seaborne petroleum. Iran's own crude exports, depending on whose series you trust and which month you sample, have run in the range of one and a half to one and eight-tenths million barrels per day across 2024 and 2025. Almost all of it goes east. Chinese independent refiners, concentrated in Shandong — the so-called teapots around Rizhao, Yantai, Dongying — take the overwhelming majority.

At a discount of five to nine dollars a barrel against Brent, that is a cash flow on the order of thirty to forty billion dollars a year. Not a rounding error. Not a line item a government shrugs off. A budget.

Now the part that matters to me, and the part that a naval officer has no reason to discuss: that cash flow does not move in dollars.

Iran was cut from SWIFT twice, in 2012 and again in 2018. What replaced it was not a hole. It was a stack. I have watched this stack assemble layer by layer over eight years, and it is one of the more instructive pieces of financial engineering of the century — not because it is elegant, but because it works well enough to defeat the assertion that it does not exist.

Layer one is bank messaging. CIPS, the renminbi cross-border interbank channel, plus a lattice of bilateral currency agreements. This is the volume leg. It is slow, documented, and politically hedged, which is why it handles the large, boring flows.

Layer two is barter and netting. Crude against construction contracts, crude against refined product, crude against machinery, settled as an accounting offset in a ledger nobody outside the counterparties can inspect. This is the leg that makes sanctions accounting so difficult, because barter has no price and therefore no obvious transfer to trace.

Layer three is re-invoicing. The cargo is documented as Omani, Emirati, Malaysian, or Iraqi origin. The ship changes hands through a chain of single-purpose companies in jurisdictions with patient registries. The paperwork is internally consistent. That is the point. A false document that is consistent is harder to attack than a true one that is not.

Layer four is the ship itself. The shadow fleet — estimates have run from six hundred to nearly a thousand tankers at various points, older vessels, opaque beneficial ownership, insurance that exists mostly as a certificate rather than as cover. These ships turn off their transponders near the transfer zones and turn them back on somewhere else.

Layer five is the residual. The part that does not fit neatly into any of the above. Fees, commissions, brokers, small counterparties, the ordinary graft of a large informal market. This is where crypto lives. Not because it clears thirty billion dollars of crude. It clears the friction around thirty billion dollars of crude.

I want to be precise about that, because the industry narrative overstates it and the enforcement narrative understates it, and both errors are expensive.

The truth is unglamorous. Public chains do not clear the principal of an oil trade between two sovereign-adjacent counterparties. They clear the peripheral value: the broker's cut, the shipping agent's fee, the intermediary who needs to move value across a border faster than a bank can freeze it. That is a much smaller number and a much more tractable one.

Which is exactly why it is auditable.

And it is why a blockade claim, in 2025, is a claim about data before it is a claim about ships. The blockade is not enforced by hulls. It is enforced by matching algorithms and compliance officers, and it is falsified by the same.

That is the framework. Now the audit.

Core: Six Findings

Finding One: The claim is an unaudited assertion, and the auditor's first question is scope

In a SOC 2 examination, the practitioner states scope. What systems, what period, what criteria, what was excluded. The reader then knows precisely how much weight the opinion bears.

This claim has no scope statement. Read it again. "Blockade. Zero exports." Consider what would have to be specified for it to be an auditable sentence:

Which exports? Crude only, or condensate and refined product as well? Which origin — Iranian-flagged, Iranian-owned, or Iranian-origin regardless of flag? Which destinations? Which period — the last quarter, the last month, since the announcement? Which enforcement mechanism, and with what measured effectiveness? What is the false negative rate — how many cargoes were attempted and not intercepted?

None of this is present. Not because the reporter failed, but because the source did not supply it. Military spokespeople are trained to supply the top line and withhold the reconciliation. It is a reasonable institutional instinct and a catastrophic evidentiary practice.

Here is the asymmetry that should trouble any careful reader. The United States has, within the same government, the finest maritime domain awareness apparatus ever assembled, plus commercial data purchases from firms like Kpler and Vortexa, plus satellite imagery, plus signals intelligence on the very brokers who arrange the transfers. If zero exports were a fact, the proof would be a spreadsheet with forty thousand rows, and it would be available for release in redacted form within a week.

An absolute claim with no appendix is a marketing claim.

I have rejected three separate "independently audited" claims from protocol teams in the last two years where the audit letter covered twelve lines of code and a governance multisig, yet the marketing deck presented it as whole-system assurance. Same failure mode. Different uniform.

Finding Two: Historically, maximal pressure did not produce zero, and the gap is instructive

The 2018 to 2020 maximum pressure campaign is the closest available control group. Iran was cut from SWIFT, its oil buyers were threatened with secondary sanctions, tankers were seized, and the policy was applied with more multilateral cooperation than exists today.

Exports fell from roughly two and a half million barrels a day to somewhere between two hundred thousand and five hundred thousand. That is a ninety percent reduction. It is also not zero.

And those residual barrels mattered. They were the difference between a government under pressure and a government in crisis.

The lesson from that control group is not that sanctions fail. It is that sanctions asymptote. Each incremental tightening removes the easiest flows first. The remaining flows are the ones with the highest evasion investment per barrel, the most entrenched intermediaries, and the greatest political cover from the destination state.

So when a commander in 2025 claims the asymptote has reached zero, the burden of proof is not merely high. It is historically unprecedented. The claim asserts that the hardest percentile was eliminated — the very percentile that survived five years of the most aggressive financial campaign of the modern era.

That is possible. Policies do break through. But it requires evidence in proportion to the improbability.

Finding Three: The settlement leg is a better lie detector than the maritime leg

Here is where my particular expertise becomes useful, and where I diverge from the analysts who were watching the sea and not the rails.

Suppose the claim were true. Trace what must happen to the money.

If Iran's crude export goes to zero, then the payment inflows to Iranian state-linked entities go to zero, with a lag of roughly thirty to ninety days depending on the terms of the last delivered cargoes. Those inflows have a documented downstream footprint. Some of it lands in the banking system, which is opaque. Some of it lands in the formal exchange sector, which is semi-opaque — Iranian crypto exchanges serving as a retail on-ramp for a currency under stress. Some of it lands in public-chain addresses that sanctions authorities have been designating and delisting and redesignating since 2018, and which anyone can inspect.

The observable consequence of a true blockade would be a step change, not a trend change, in a specific set of on-chain measures:

Velocity through Iranian-linked exchange hot wallets. Stablecoin inflow to addresses clustered by counterparty behavior. Withdrawal behavior into fiat through jurisdictions that remain permitting. The size distribution of OTC desk settlements in the UAE and Malaysia, which is not public but which leaves fingerprints in stablecoin mint/burn patterns.

None of that has been presented. And the market's reaction — which I will discuss later — suggests the market did not price a step change.

There is a second-order observation that I consider more damning than the absence of data. It is what the claim does to the enforcement apparatus itself.

A public blockchain is the most effective sanctions-surveillance instrument ever built. It is a permanent, global, queryable record of value transfer that requires no subpoena, no mutual legal assistance treaty, no cooperation from the target's bank. Firms like Chainalysis and Elliptic built a business on the fact that criminals move value onto public infrastructure and it stays there.

When a government that already possesses this instrument announces an absolute enforcement success, and the successor question is where is the cluster analysis, the answer is usually that the cluster analysis does not support the absolutism. The absolutism is doing rhetorical work the data will not do.

I have watched this precise pattern in DeFi. A protocol announces "zero liquidations" during a drawdown. The truth is that the liquidations happened in a private mempool, or were socialized, or were absorbed by a backstop the protocol does not count as a liquidation. The metric survived. The substance did not.

Finding Four: The trust assumptions in the evasion stack are identical to the trust assumptions in a bridge, and they fail the same way

This is the part of the analysis that I consider original, and I want to state it carefully because it runs against the instinct of people who think of sanctions evasion as a technology problem. It is a trust problem.

Consider what the evasion stack must accomplish. It must transfer value between counterparties who cannot rely on a shared legal system, cannot enforce a contract in a court both parties trust, and cannot appeal to a neutral arbiter without exposing themselves to prosecution. In other words, it must operate with no external enforcement mechanism and no trusted party.

That is precisely the problem blockchains claim to solve, and precisely the problem they mostly do not.

When I audited cross-chain messaging systems, the finding I reported most consistently was that the security model reduced to a small set of off-chain signers. The messaging layer described itself as decentralized; the verification layer was two parties with a shared liveness dependency. Remove either, and the message does not arrive. Corrupt either, and the message is whatever they say it is.

Now map that onto the evasion stack. The shadow fleet's financial coordination runs through a set of intermediaries — brokers, shipping agents, exchange desks, OTC counterparties. These are the relayer-equivalents. They are trusted. They must be trusted, because the alternative is a public protocol that anyone can inspect, which is the last thing the counterparties want.

So the system that exists to escape state enforcement is itself enforced by a handful of trusted parties who can be arrested.

And they are arrested. The designations that matter are not the protocol-level ones. They are the individual-level ones: the broker in Sharjah, the shipping executive in Singapore, the exchange operator in Tehran. The chokepoint is human, and humans are subpoenable.

This changes the correct reading of the blockade claim. It means enforcement does not need to intercept every tanker. It needs to raise the cost of trust. If each additional intermediary in the chain demands a larger premium for the legal risk of being a relayer, the system's throughput falls without a single ship being boarded.

And that is a mechanism that produces a decline, never a zero. The last intermediary in the world is willing to work for the right price. There is always a price. This is the same structural reasoning that tells you why liquidity mining APY is a subsidy rather than a yield: the activity exists at the price the state tolerates, and the size of the residual is a function of the risk premium, not of the enforcement ceiling.

A blockade can compress the residual. It cannot eliminate it. It can only make it expensive enough that it is no longer worth it — and for a state facing existential pressure, the threshold is effectively infinite.

Finding Five: The throughput and privacy mismatch is fatal at the principal level, and the industry keeps pretending it is not

There is a genre of crypto content that treats oil settlement as the next frontier of on-chain finance. Tokenize the cargo. Settle in stablecoins. Disintermediate the banks. I have read these decks. I have never seen one pass a stress test.

Run the numbers. Three million barrels a day of crude at seventy dollars is two hundred and ten million dollars a day of principal, moving between counterparties who require final settlement with legal certainty in under twenty-four hours, with confidentiality toward third parties, and with the ability to reverse a fraudulent transfer through a court order.

Public blockchains offer exactly one of those four properties. They do not offer confidentiality — every counterparty's treasury is legible to competitors and to sanctions authorities. They do not offer legal finality that a commodity trading house's general counsel will accept. They do not offer reversal, and the absence of reversal is not a feature when the counterparty has just delivered a misdeclared cargo.

The industry answer is always the same: privacy layers, zero-knowledge proofs, permissioned subnets, DA layers. I have audited implementations of each. The privacy layers introduce their own trusted setup or their own operator set, which reintroduces the exact problem they claim to solve. The permissioned subnets are consortia, which is to say they are banks with worse documentation. And the data availability question is largely irrelevant here: these transactions do not generate enough data to require dedicated availability infrastructure. A day of the world's crude trade is a rounding error against the blob space that rollups argue over.

Which means the on-chain leg of the oil trade is structurally confined to the fringes, no matter how the technology matures. The fringes are small. Small fringes are measurable. That is the entire basis of my confidence that this claim can be falsified empirically rather than argued about ideologically.

A quick compliance checklist for anyone who wants to do that falsification themselves. I run a version of this before publishing anything that touches sanctions flows.

Compliance Checklist — Falsifying a Zero-Export Claim

One. Define the assertion precisely and in writing. Crude, condensate, refined product. Iranian origin versus Iranian flag. Specified date range. Written down before looking at data, so the goalposts cannot migrate.

Two. Pull two independent vessel-tracking series, not one. Differences between them are informative, not inconvenient.

Three. Count AIS dark events in the transfer zones, not vessel arrivals. Dark events precede arrivals by days and are harder to fake.

Four. Track the destination port calls, not the declared destination. Rizhao, Yantai, Dongying, and the Malaysian transfer anchorages.

Five. Pull the stablecoin leg: mint/burn aggregates for the relevant issuers, and freezes applied to addresses in the identified clusters. A true cessation shows up here within one settlement cycle.

Six. Check war-risk insurance premia for the relevant corridors. Risk premia are prices, and prices do not lie about expectations.

Seven. Reconcile against the previous control period. A change of zero is a discrete event. A change of thirty percent is a trend. The claim is about a discrete event, so verify the discontinuity.

Eight. State your own scope limitations before you publish. If you cannot inspect bank flows, say so.

Findings six through eight are the ones people skip. They are the ones that make an opinion defensible.

Finding Six: The claim serves four audiences, and none of them is the auditor

I am not naive about the function of the statement. Statements like this are not offered for verification. They are offered for effect, and the effect is broadcast to four recipients.

To the domestic audience: proof that the policy works. To Tehran: destruction of the expectation that the economic situation can improve, which is a more powerful weapon than any individual interception. To Beijing, which holds the only lever that matters: a warning that secondary enforcement is live and that the compliance departments of the Chinese banks buying the trade finance are now the front line. To the oil market: an uncertainty premium, which is itself a form of pressure.

That is a competent strategic communication. It is also, by construction, not a factual report. A sentence engineered to do four jobs simultaneously will be optimized for effect in all four and accuracy in none.

There is also an irony the statement cannot acknowledge. A navy that cannot guarantee the safe transit of its own allies' commercial shipping through the Red Sea is in a weak position to declare a hermetic blockade two thousand miles away. In the informal ledger where I do my work, capacity and claim are separate line items, and the distance between them is the measure of credibility. Here the distance is wide.

Successful blockades are silent. They do not need announcing, because the announcement costs more than it gains. When an enforcement success is announced in absolute terms, the organizational logic is almost always one of two things: the enforcement needs political backing to sustain its resourcing, or the "success" needs periodic reaffirmation to retain deterrent value.

Both of those are admissions. Neither is consistent with a completed fact.

Contrarian: Where the Bulls Are Right, and Where the Crypto Narrative Is Correct for the Wrong Reason

I have spent the last three thousand words dismantling a state claim. Let me turn the instrument on my own industry, because the intellectually honest version of this analysis requires it, and because the consensus crypto view of these events is wrong in a way that flatters the people holding it.

The consensus view runs like this. Sanctions do not work. Crypto is a sanctions-evasion tool. Each new enforcement failure proves that blockchains are the future of unrestricted value transfer, and therefore the asset class is validated.

Every clause of that argument is wrong, and the second clause is wrong in a direction that should frighten the people who believe it.

Start with the correct part. The dollar's chokepoint status is real, and it is being actively dismantled by the very states it is aimed at. Iran's eight-year experiment with non-dollar settlement was forced, and it produced infrastructure that now exists and does not disappear. CIPS volumes have grown. Bilateral currency agreements have proliferated. Gold and barter netting are back in the settlement stack of a major oil trade. None of that is reversible by a policy change, and all of it is a durable, if slow, erosion of the margin the United States extracts from the global financial system.

The people who cheered this as "de-dollarization" got the direction right and the magnitude wrong. It is not a collapse. It is a widening of the second-tier settlement market, which is a real and permanent cost, and which nobody in Washington is properly accounting for. History repeats, but the gas fees change. The mechanism of erosion changes with each cycle; the erosion does not stop.

Now the part the bulls got wrong. They believe public blockchains are a sanctuary. They are the opposite. They are the greatest surveillance apparatus ever handed to an enforcement agency for free, and its existence means the evasion premium is now permanently higher for anyone who touches a public chain than for anyone who does not.

The industry has confused transparency with permissionlessness. Public chains are permissionless to use and merciless to hide in. Every dollar that passes through them is a signed confession with a timestamp. The sophisticated evaders understand this, which is why the principal of the trade never touches them, and why the residual that does touch them is the smallest — and most thoroughly monitored — component of the stack.

So the correct conclusion is the opposite of the industry narrative. Crypto is not defeating the blockade. Crypto is making the blockade more measurable than it would otherwise be. The reason the claim of "zero" is so easy to falsify is that the marginal leg of this trade moved onto infrastructure that never forgets.

There is a second contrarian point, and it is about a genuine public harm that is under-discussed because it cuts against both camps.

The freeze capability that sits inside the major stablecoin issuers is a concentrated, discretionary authority held by a small number of private entities, exercised without a court order in many cases, against addresses they identify themselves. Cumulative freezes over the past several years are reportedly in the billions of dollars across thousands of addresses. Some of those were unambiguously correct. Some were collateral damage. When I examined the incident where an exchange's addresses were compromised and the resulting holdings were frozen, the legitimate users caught in the blast radius had no appeals process, no notice, and no remedy other than to monitor a public statement and hope.

That is a sanctions enforcement system with no due process layer and no disclosure of criteria. It works because the industry has accepted it as the price of dollar access. Trust is a bug, not a feature — and the industry has embedded a trusted freeze authority into the most widely used settlement asset on the planet, then described the resulting system as censorship-resistant.

This matters for the blockade question because it means enforcement does not require maritime action at all, in the residual leg. It requires a compliance officer at an issuer pressing a button. That button is the real blockade, and it has no jurisdiction, no appeals court, and no public docket.

Therefore the honest position is this. The state's blockade claim is probably overstated and certainly unverified. The industry's sanctuary claim is simply false. And the mechanism that actually works — discretionary freezing of address clusters — is one that should make every honest holder of a stablecoin nervous, not triumphant.

Both sides are claiming a victory they did not earn. The ledger is the only neutral party, and it has not been summoned.

Takeaway: An Accountability Call

The claim stands as a claim. It may be substantially true in the sense that the enforcement apparatus has tightened on specific buyers, specific vessels, and specific intermediaries. It is almost certainly false in the specific way it was phrased, because "any" is a word that enforcement systems do not produce and spokespeople do.

The test is not rhetorical, and it does not require access to classified data. It requires four charts and a stated methodology.

A histogram of AIS dark events in the Gulf of Oman transfer zones against the prior year. A series of dark-fleet arrivals at Shandong port terminals, reconciled against declared origin. A recorded count of stablecoin freezes and cluster designations, published with criteria. And one figure nobody in this debate has offered: the actual measured volume of the residual, with an error bar.

None of these is impossible to produce. All of them are falsifiable. That is precisely why their absence is meaningful. In an audit, missing evidence for an assertion is not neutral. It is a finding.

So here is the accountability call, addressed to both parties. To the government: publish the reconciliation, not the superlative. A blockade that claims zero and shows nothing is asking to be believed on the same basis as a protocol that claims it cannot be hacked. To the industry: stop treating transparency as a moat you do not have. The chain remembers everything, and the first person to publish the correct cluster analysis will not be the person who wins the argument — they will be the person who sets the terms of it.

Ask the question the way an auditor asks it, and watch which side answers with a table and which side answers with adjectives.

Code is law; intent is irrelevant. Show me the transaction.