The Iranian Spy Pipeline Ran on Crypto. The Real Story Is That It Got Caught.

Israeli prosecutors just dropped the kind of indictment that keeps compliance officers awake at night. Iranian espionage recruitment—funded through cryptocurrency. Not a shell company in Cyprus. Not a diplomatic pouch stuffed with cash. Not a correspondent bank corridor through Turkey. Crypto. The charges describe a functioning pipeline: state operatives moving value across borders, paying recruiters, sustaining an intelligence network. The mainstream read: "See? Crypto is for criminals. This is why we need more regulation." Hold on. Because the actual technical story here is the mirror image of what the headlines suggest. The pipeline ran. It moved funds. It recruited assets on Israeli soil. And then it got caught. The entire chain got reconstructed in enough forensic detail to file criminal charges. That's not a failure of blockchain transparency. That's the system performing exactly as designed. When the peg breaks, the truth arrives—and the truth here is that pseudonymity is not anonymity, and the ledger remembers everything. Speed reveals what stillness conceals. The news cycle treated this as a crime story. I'm going to treat it as a systems-level event with three layers that almost nobody has unpacked: the technical mechanics of how this kind of tracing actually works, the regulatory machinery it's about to trigger, and the quiet industrial shift it signals for the entire compliance ecosystem. Based on my years auditing MEV-Boost relay code and building on-chain trading infrastructure, I can tell you exactly where this investigation's technical leverage came from—and where it's heading next. Let's start with the context that the trade press skipped. Iran's relationship with global finance has been strangulated for decades. The OFAC framework doesn't negotiate. Dollar clearing is sealed. European banks face catastrophic secondary sanctions risk if they touch Iranian counterparties. SWIFT is effectively closed for Tehran's state-linked entities. For an Iranian intelligence apparatus trying to move money into Israel—one of the most surveilled countries on earth—the traditional banking rail isn't just inconvenient. It's impossible. Cryptocurrency filled that void. This isn't a new trend. Since roughly 2018, Iran has quietly become one of the most interesting crypto economies in the world, not because of DeFi innovation or NFT experiments, but because sanctions created a genuine, grinding economic demand for alternative value transfer. Iranian bitcoin mining became a state-adjacent industry. Licensed miners sold BTC to fund imports. Tehran experimented with using cryptocurrency to bypass elements of the sanctions regime. Oil exports have been financed through various tokenized backchannels. The pattern has been documented by multiple investigative outlets and UN reports over the years. So the fact that a state intelligence service would use crypto for operational funding is not shocking. It's the logical continuation of a decade of adaptation to financial isolation. What's genuinely significant is that Israeli intelligence—one of the most sophisticated signals intelligence establishments on the planet—is now prosecuting this activity in public, with enough detail to expose the mechanics. That's an intelligence capability statement disguised as a court filing. Tracing the alpha trail through the noise, the technical dimensions deserve forensic attention. Let me walk through what the investigative process almost certainly looked like, because this is where the "crypto is anonymous" myth dies a deserved death. Address clustering is the foundational technique. Blockchain investigators don't begin with a name; they begin with behavior patterns. Shared spending, common deposit addresses, co-spending relationships, timing correlations. Over time, a set of addresses emerges that mathematically behaves as a single logical entity. Chainalysis built an industry on this. Elliptic, TRM Labs, Elementus—they all follow the same playbook with varying degrees of sophistication. The core insight is simple: if one entity controls fifty addresses, those addresses act as one brain, and the chain exposes the neural connections. Exchange KYC data is where pseudonymity actually collapses. This is the step that most casual observers miss. A spy pipeline needs liquidity. It needs to convert crypto into spendable currency. At some point, funds must interact with an exchange or an on-ramp that has a KYC obligation. Every interaction with a compliant exchange creates a permanent cryptographic link between pseudonymous blockchain addresses and legal identities. The link doesn't break; it compounds. The question isn't whether the investigator can find that bridge—it's whether they can get legal access to the exchange's records. In an espionage case involving Israel and Iran, with mutual legal assistance treaties and intelligence-sharing arrangements in play, you can bet that access was obtained. Time-pattern analysis is the layer that catches state actors specifically. Espionage recruitment is not high-frequency trading. There are bursts of activity at odd hours. Irregular intervals. The funding arrives in strange increments—not rounds, not clean numbers, but the kind of values that reflect careful operational planning rather than normal financial behavior. A senior blockchain analyst looking at those patterns sees the fingerprint of tradecraft. Automated DeFi strategies have rhythmic signatures. Intelligence funding has anxious, deliberate, irregular signatures. The chain doesn't lie about its rhythms. Geographic identification through exchange footprints is another key vector. Iranian operatives tend to use specific on-ramps, specific local platforms, despite sanctions. When investigators see funds route through exchanges known to serve Iranian users, the suspicion profile sharpens. Then the question becomes follow-the-money and follow-the-human. Start with one known informant or arrested recruiter; trace their wallet backward; watch the branching structure of upstream funding. The ledger provides a complete evolutionary record. This was not a lucky break. It was deliberate, methodical technical work running on a public ledger where every transaction is permanently etched. Now for the uncomfortable question that the "crypto equals crime" camp doesn't want to confront: if tracing technology has advanced to the point where a hostile state intelligence operation gets caught and charged, what does that say about the broader criminal-use narrative? Every dollar that moved through that Iranian pipeline is breadcrumbs. Every address is a data point. The public ledger that enables sanctions evasion is the same public ledger that enables counterintelligence. There is no asymmetry here. There is a symmetry—and the balance is shifting toward the investigators. This is the infrastructure story underneath the headlines. The architecture of belief vs. the code of fact. The belief says crypto is a black market weapon. The code says it's a forensic goldmine. And in this industry, the code ultimately wins. I've seen this dynamic play out in my own work. When I audited the MEV-Boost relay implementation in 2023, I found a race condition in the block-building logic that could theoretically permit sandwich attacks during high-volatility windows. That was a code-level vulnerability discovered because the system's state machine was exposed to inspection. The same principle applies here: the blockchain exposes everything to inspection, whether you're looking for economic exploits or intelligence funding trails. The second layer is market impact—or rather, the absence of it. When the news broke, the market shrugged. BTC barely moved. ETH stayed flat. Even privacy assets that you might expect to pump on illicit-demand narratives—or dump on regulatory fears—showed minimal reaction. This is what I call narrative desensitization. In the 2022 era, a headline like this would have triggered a 24-hour FUD cycle. Self-custody search queries would spike. Exchange withdrawals would tick up. Retail would panic-post threads. In the current environment, the market assessed the information content and said: no new fundamental data. Because there wasn't, at the protocol level. This is a geopolitical event with regulatory second-order effects. It's not a smart contract exploit. It's not a governance failure. It's not a depeg event. It's a state actor using a value-transfer rail for operational purposes, which is exactly what the rail was designed to do. The market understood this faster than the journalists did. That's maturation, not apathy. From my trading-signal perspective, the tradeable information isn't in the headline—it's in the compliance response. This is where the real intelligence value resides. Watch OFAC's SDN list updates over the next ninety days. Watch for new FinCEN guidance on "state-sponsored espionage financing" as a formal typology. Watch for coordinated action between Israeli, American, and European financial intelligence units. That's where the actual consequential moves happen. The regulatory math deserves careful unpacking. FATF's Travel Rule has been a slow-burn implementation challenge for years. Exchanges are supposed to collect and transmit counterparty information for transactions above specified thresholds. Actual compliance quality varies staggeringly across jurisdictions. Some exchanges treat it as a checkbox exercise. Others have built genuinely robust sanctions-screening pipelines. This case hands the "national security" faction in every regulatory body a fresh, high-visibility example. When FATF updates its guidance—and it will—expect "state-sponsored espionage financing" to appear as a new risk typology. That single inclusion will cascade through every national regulator's rulebook, every exchange's compliance manual, every institutional counterparty's due diligence questionnaire. The costs are real. Screening algorithms need upgrades. Transaction monitoring rules need new red-flag patterns. Customer risk scoring needs new attributes for jurisdiction-based risk. This isn't fancy; it's the cost of doing business in a world where governments are actively watching how crypto intersects with hostile intelligence operations. I've seen compliance teams in Toronto and New York scramble after much smaller events. This one will accelerate their timelines. A closer look at ecosystem impact reveals differentiated pressure. Centralized exchanges face the strongest immediate pressure. The expectation that they proactively monitor for sanctions-related flows—not just check names against OFAC's list—is firmly established. This case will push every major exchange to integrate real-time blockchain intelligence. That means procurement contracts with firms like Chainalysis, Elliptic, or TRM Labs. It means hiring more blockchain analysts. It means building automated address-screening into deposit and withdrawal flows, not just manual checks. Privacy coins and mixing protocols face the most concentrated risk. The indictment demonstrates—to the extent the public record shows—that even layered exchange-hopping didn't prevent reconstruction. But regulators don't respond to evidence of effectiveness; they respond to fear. The precedent is Tornado Cash: notwithstanding the legal arguments about whether smart contracts can be "persons" under sanctions law, the operational reality is that OFAC designated the protocol and the ecosystem complied. Expect renewed rounds of pressure on privacy-enhancing technologies. Expect more exchange delistings. Expect more hostile commentary from policymakers who see this case as confirmation of their priors. OTC desks serving high-risk jurisdictions are now in the crosshairs. The Iranian pipeline needed exit liquidity somewhere. If Israeli intelligence could trace the flows, other agencies can too. The market should assume that every OTC desk that facilitated Iranian-linked transfers is now a known quantity in government databases. The question is when, not if, enforcement catches up. The broader pattern here echoes a historical moment. The Silk Road takedown in 2013 was the first moment the public realized Bitcoin was traceable. The FBI's operation against Ross Ulbricht combined operational mistakes with early-stage chain analysis, and the narrative shifted from "anonymous internet money" to "a very risky way to commit crime." That shift changed the trajectory of the industry's relationship with law enforcement. The Iranian pipeline case is the same structural moment, but for state actors specifically. And the capabilities are radically better. In 2013, the tools were nascent. The manual effort was enormous. The FBI's forensic work took years. In 2025, the tools have been industrialized. Every major intelligence agency has a blockchain intelligence team. Commercial dashboards turn a decade of transaction history into a searchable graph database. This is not a fair fight. And the asymmetry grows every year. Let me bring in a direct experience that informed my view. During my audit work on the MEV-Boost relay infrastructure, I saw how a public system's transparency creates both attack surfaces and detection surfaces. The race condition I identified could theoretically enable sandwich attacks during extreme volatility, but the same codebase's openness meant that every block production was inspectable by anyone with the technical skills to look. The chain is a state machine that records everything. You cannot hide from your own past transactions. That fundamental property is what makes crypto both attracative to sanctions evaders and ultimately fatal for them. The intelligence community has internalized this reality faster than most market participants realize. Italian anti-mafia units, the FBI, Europol, Israeli intelligence, British financial crime agencies—they've all invested heavily in blockchain analyst teams and tooling. The drumbeat of takedowns, sanctions, and indictments is the proof. The Iranian pipeline case is just the latest headline; the underlying capability has been building quietly for five years. Now let's look at the mismatch between popular narrative and technical reality. When a general reader sees "Iran funds spy recruitment through crypto," the immediate conclusion is: crypto is dangerous. Crypto enables enemies. Ban crypto. When an analyst sees the same headline, the conclusions are different: an intelligence operation failed in its operational security. Investigative techniques worked. This is a legal and regulatory event, not a protocol failure. The gap between those reactions is the gap between belief and code. And in this industry, the code eventually dominates. Anyone ignoring the forensic reality of public blockchains is building their thesis on sand. Consider the properties more deeply. Traditional finance: slow, monitored, but opaque once funds cross jurisdictional boundaries. Major frauds routinely go untraced for decades because the banking system's internal rules—bank secrecy, correspondent relationships, off-shore registries—create natural hiding places. Crypto: fast, pseudonymous, but permanently transparent and globally auditable. Every token movement for the entire history of the asset is accessible to someone with the right tools. For an intelligence agency evaluating which rail is more operationally dangerous to use, the answer is not obvious—and increasingly, the answer is that crypto is the more dangerous choice for the user. The Iranian case proves that point. The funds flow was reconstructed. The entities were identified. The recruitment network was exposed. The legal consequences are now unfolding. The sanctions evasion tool turned out to be a forensic weapon in reverse. Let me address the compliance tech angle more directly, because the source analysis I worked from flagged this correctly. The event will create measurable revenue tailwinds for blockchain intelligence and compliance technology firms. Government agencies want more coverage. Financial institutions want more coverage. Exchanges under regulatory scrutiny want more coverage. The budgets are real, not rhetorical. When governments say "national security," procurement follows. This is one of the few concrete, investable takeaways from an otherwise structural story. Tracing the alpha trail through the noise means recognizing that infrastructure beneficiaries are often the quiet winners. The companies doing the tracing in these investigations—Chainalysis, Elliptic, TRM Labs, and their smaller peers—are positioned to see sustained demand growth from the public sector. The intelligence-sharing arrangements between Israel, the US, and European authorities will create procurement cycles that benefit commercial analytics providers. If you're looking for an underappreciated angle to this entire event, it's not Bitcoin's price. It's the analytics layer. But also, a contrarian observation about privacy assets. If the investigators reconstructed the pipeline despite exchange hopping and the possibility of some mixing, then privacy tools are less of a shield than regulators assume. The vulnerability for state actors—and for criminals generally—is human error, operational complexity, and the sheer unforgiving nature of an immutable ledger. No financial technology can protect you from the mistakes that inevitably compound over months of running an intelligence operation. Privacy versus traceability is the wrong frame. The real frame is discipline versus sloppiness. And the ledger records all of it. The geopolitical dimensions are important to acknowledge, even if they're uncomfortable. Israel and Iran have been engaged in a covert conflict for decades. The cyber domain has been a major battlefield. This crypto-funded recruitment pipeline is one more front. But for the blockchain industry, the key insight is that the trustless, transparent, global value-transfer layer is being weaponized by both sides—offense uses it for funding; defense uses it for detection. No other financial system offers that double-use property at the same efficiency. The market's desensitization deserves more commentary, because it tells us something about where we are in the adoption curve. In previous cycles, any crypto-negative geopolitical story would trigger an immediate risk-off response. Now traders understand that regulatory narrative events rarely change the fundamental cost basis of on-chain settlement networks. The fundamental value proposition—decentralized, immutable, borderless value transfer—is not diminished by news about sanction evasion or espionage. It's actually reinforced. The system is used because it works. The system detects because it's transparent. Both properties coexist in the same technology stack. This is the maturation process. And it's good for long-term investors. Let me also flag a second-order effect that has received less coverage. The intelligence sharing between Israel and other Western allies on crypto matters creates an informal information network that intersects with financial regulation. When Israeli authorities identify addresses linked to the Iranian pipeline, that information will flow to Five Eyes partners and other aligned agencies. The financial intelligence will get shared. The addresses will get flagged. The compliance ecosystem will update. This cross-border information exchange layer is becoming as important as formal sanctions designations. It runs faster than policy, and it operates on data, not just legal frameworks. For exchanges, this creates an interesting dynamic. Formal OFAC designations trigger immediate compliance obligations. But informal intelligence-based flags—shared through channels like Interpol notices or Egmont Group communications—require proactive judgment. Exchanges may need to freeze or restrict addresses that aren't formally sanctioned yet, to avoid facilitating flows that intelligence agencies have flagged. That's a higher operational burden, but it's also the future of how crypto compliance will work. Let me add some practical analytical depth on how exchanges should respond, because that's where the real activity will be. First, conduct a backward-looking review of any historical transactions that touched high-risk jurisdictions. The Iranian pipeline didn't just interact with Iran; it passed through exchanges, potentially including compliant ones. Those flows will have left traces in exchange databases. Forward-looking exchanges will proactively identify and report them. Second, build sanctions screening into the blockchain layer, not just the account layer. This means using address-level screening tools at the API level, not just in a risk team's manual review queue. Third, develop escalation protocols for intelligence information, even if it's informal. Compliance teams need processes to act on non-public information about address risk without creating legal exposure for themselves. These are practical steps. They're implementable now. And they're the same steps that will define the "responsible exchange" category in the coming regulatory environment. The middle-market exchanges—the ones that haven't invested heavily in compliance infrastructure—will face the hardest decisions. Do they continue serving users in high-risk jurisdictions? Do they add restrictions? The political pressure will ramp quickly. Headline-driven enforcement is a documented pattern: a major incident leads to a crackdown, which leads to fines or charges, which leads to the next incident involving a different platform. Small and midsize exchanges without robust sanctions programs should treat this as a warning shot. Now, a deeper point about the economics of sanctions evasion through crypto. The Iranian pipeline is illegal and destabilizing. But it also demonstrates something about the demand side for crypto infrastructure that permanent bulls should note: crypto provides value in situations where traditional finance is unavailable. That includes sanctions evasion. It also includes remittances to sanctioned regions, humanitarian aid, journalism, dissident funding, and pure economic survival under authoritarian governance. The utility doesn't discriminate between morally acceptable and morally objectionable uses. It just works. The ongoing regulatory challenge is to build mechanisms that prevent bad actors from abusing a neutral technology while preserving its benefits. That's a hard problem. This case makes it harder. The privacy community's argument—that stronger privacy protections would make it harder for state surveillance to operate—is also implicated here. If the Iranian operation had used stronger privacy tooling effectively, would it have been caught? The answer is unknown, but the effort to answer that question will drive significant policy debate over the next year. Expect renewed argument about whether privacy-enhancing technologies are net-positive for human rights or net-negative for national security. The existence of state-sponsored espionage pipelines makes the security argument stronger in political terms, even if the technical merits are debatable. My own view, shaped by working on trading infrastructure: neutrality is real. The same relay code that can enable sandwich attacks in theory enables competitive block building in practice. The same chain that exposes criminal networks exposes the foundations of the entire industry. Decoding the invisible edge in the block means understanding that the system's transparency is its defining characteristic. It's not a bug. It's the whole point. Let me also bring in the AI angle, because the intersection matters. In 2025, I built a prototype where an autonomous AI agent executed trades based on sentiment analysis, paying for compute resources in USDC. The system demonstrated measurable efficiency gains in execution speed versus manual trading. The same kind of automation is coming to compliance monitoring. AI models trained on known sanctions evasion patterns will be able to flag suspicious flows in near-real-time. The Iranian pipeline's funding patterns—irregular intervals, careful increments, exchange hopping—are machine-detectable features, not obscure noise. The next generation of blockchain intelligence will be AI-powered, and it will be substantially more effective than today's rule-based systems. For state actors trying to evade detection, that's a darkening horizon. Regulatory technology is not the most glamorous corner of the crypto ecosystem. But it's the corner that benefits most directly from this event. If you're looking at where the money flows after a high-visibility national security case, it's compliance infrastructure, sanctions screening, and blockchain intelligence. That's been true since the 2013 Silk Road takedown accelerated early Bitcoin AML startups. It's true now. Let me turn to the specific market-relevant considerations for institutions. The risk-approval process for institutional allocations to crypto products often involves a compliance review that touches on reputation, jurisdictional exposure, and regulatory history. This case, and the broader narrative of crypto-enabled espionage financing, will give conservative risk officers another reason to slow down. It's not a direct price driver, but it's a velocity constraint on institutional adoption. Expect diligence questionnaires to include questions about exposure to high-risk jurisdictions and compliance with sanctions-related blockchain screening. Expect more conservative fund descriptions to explicitly exclude privacy tokens and mixer-adjacent assets. The good news is that this is a solvable problem. Institutions trust compliance infrastructure. Built properly, it will absorb the additional requirements without significant friction. And the presence of credible, active enforcement against illegal uses actually strengthens the case for regulated participation. The "clean institutional market" narrative creates a clearer divide between compliant and non-compliant activity. From a pure narrative perspective, the next three months will determine whether this becomes a major story cycle or fades into background noise. The key feeder events: OFAC designation announcements, DOJ indictments, FATF guidance updates, exchange compliance announcements. Each of those events would create new headlines and extend the cycle. Without them, the story will decay quickly. The market's attention span is short, and geopolitical crypto stories have a documented pattern of rapid half-life unless they're attached to price action or regulatory certainty. What should the average crypto-native reader take from all of this? First, stop treating pseudonymity as anonymity. The distinction is not theoretical; it's operational. The Iranian pipeline is the latest and most dramatic proof. Every major chain-analysis firm, every intelligence agency, every financial-crime unit has built structures on that distinction. The design wins. It's not a matter of luck. Second, understand that crypto's transparency is a differentiator, not a weakness. No other financial system can reconstruct a state intelligence funding pipeline from public records alone. The audit trail is permanent, global, and accessible. That property attracts legitimate institutional participation because it reduces fraud risk. It's an asset, not a liability. Third, recognize that market desensitization is a signal. The lack of major price movement after this event is not the market ignoring a threat. It's the market correctly assessing that a geopolitical regulatory story with no direct on-chain protocol impact does not alter the fundamental investment thesis for major assets. It's noise. It matters for compliance and policy, but it doesn't matter for the long-term value proposition of decentralized settlement. Tracing the alpha trail through the noise, the actual opportunity sits in the infrastructure layer and in the forward-looking portfolio adjustments that anticipate stricter compliance standards. Privacy assets face headwinds. Compliance tech faces tailwinds. Centralized exchanges face higher costs—and the industry will pass those costs to users in the form of tighter jurisdiction restrictions and more intensive identity verification. The process has already begun; this event accelerates it. The deeper structural insight is that we're moving toward a differentiated ecosystem. Compliant, institutionally accessible infrastructure will grow. Privacy-focused, anonymity-preserving tools will be pushed toward regulatory margins. The dividing line between "permissionless" and "mainstream" crypto will become more pronounced. That's neither good nor bad—it's a structural response to government attention. And the attention is not diminishing. Every state that builds blockchain intelligence capabilities gains a new tool for tracking both criminal networks and geopolitical adversaries. The intelligence community's interest in public chains is permanent and growing. That's not a temporary political cycle; it's a fundamental shift in how financial intelligence is collected. The next few months will likely bring jurisdictional updates, new compliance requirements, and a quietly growing industry around state-level blockchain intelligence. The public materials will show a few specific transactions, some named addresses, maybe an exchange designation or two. But the full picture will be revealed slowly, in layers, as enforcement actions and regulatory guidance emerge. When the peg breaks, the truth arrives—but it arrives slowly, one compliance notice at a time. I expect more of these investigations in the coming years. State actors have discovered crypto's utility for sanctions evasion, but they've also discovered its unforgiving transparency. The game is a cat-and-mouse where the mouse's every move is recorded. In that game, the cat has the long-term advantage. For builders, the takeaway is to design for a world where governments can and do trace flows. Build compliance tooling early. Integrate sanctions screening from day one. Design products that can coexist with regulation rather than fighting it. The era of "unregulated crypto" was never really a sustainable premise—and this event, in its way, is the final confirmation. Chaos is just data waiting to be organized. The Iranian pipeline looked chaotic on the surface—random-looking addresses, odd increments, exchange hops. But the pattern was there, encoded into the ledger, waiting for better tools. Those tools exist now. And the networks that let intelligence agencies connect those tools to real-world identities have matured to the point where state actors—even ones backed by a hostile government—can be exposed. Curiosity is the only honest position when approaching stories like this. The mainstream narrative tells you that crypto is dangerous. The industry narrative tells you that crypto is liberation. Both narratives are incomplete. The technical reality is that crypto is a tool, and its most distinctive property is permanent public auditability. That property creates both the danger—states can use it to bypass sanctions—and the defense—states can use it to catch other states. Both are true simultaneously. The article that broke this investigation was framed as a story about spycraft. It's actually a story about infrastructure. The blockchain's forensic properties, the compliance industry's growing capabilities, the intelligence community's increasing fluency with on-chain data, and the market's evolving sophistication in pricing geopolitical news. Put those together and you get the underreported reality: every transaction, no matter how careful, is already being watched by someone with better tools than you. That's not fear. That's clarity. For the ecosystem, this event is a call to grow up. Regulation is coming with more teeth. Compliance becomes more sophisticated. Transparency becomes more valuable. Crypto is being integrated into the world, and the world brings surveillance, enforcement, and rule of law with it. The chain sees all—and so, now, do the authorities. Watch the signals. If sanctions lists expand, if FATF guidance shifts, if exchanges tighten their screening, you'll know the system is adapting. If none of those happen, the case will remain a reference point, a memory, a proof of concept. But either way, the cat-and-mouse game has shifted. And the cats just got better tools. That's the alpha nobody's pricing yet. When the peg breaks, the truth arrives. The peg broke on the assumption that crypto could reliably hide state-funded espionage. The truth is that it can't—not anymore, not at scale, not forever. The architecture of belief—that crypto is a safe channel for covert funding—collapsed against the code of fact. The code always wins. This is the story no mainstream outlet is telling. But it's the story that matters for anyone building, investing, or trading in this industry. Transparency is crypto's killer feature, not its vulnerability. And the Iranian spy pipeline just proved it to the world.