Blockchain analysis has exposed a $100 million Russian drone procurement network. It reveals how Moscow-linked actors use cryptocurrency to purchase unmanned aerial vehicles from Chinese manufacturers for deployment in Ukraine.
The digital trail offers Ukrainian investigators near-real-time visibility into weapons supply chains that would otherwise remain completely hidden.
For example, a fresh report by blockchain analysis company Chainalysis has indicated that Russia-linked actors may have procured drones from Chinese manufacturers for deployment in Ukraine.
"Each supplier address becomes an investigative anchor: a fixed point from which blockchain analysis can map counterparty relationships, trace liquidity sources, and identify previously unknown nodes in opaque procurement networks," the researchers said.
According to them, blockchains are one of the few places where such financing leaves a permanent, actionable trace, offering "near-real-time visibility into procurement networks that would otherwise be entirely opaque."
Ukraine is known for its ability to track and hit pro-Russian targets outside Ukraine.
What's more, according to Chainalysis, investigators can distinguish between a one-time component purchase and a pattern of recurring procurement that may indicate a state-adjacent supply chain.
The analysis showed that purchasers receiving liquidity from illicit sources, such as sanctioned entities, Russian-language no-KYC swap services, and entities operating in sanctioned jurisdictions, can suggest end-use cases by nation-state actors such as Iran or Russia and their proxies.
Source: Chainalysis
For example, in the case of KB Vostok, the manufacturer of the Scalpel, a one-way attack UAV with a payload capacity of up to five kilograms, its crypto wallet showed a pattern inconsistent with a donation campaign, Chainalysis said.
The data shows that 16 of 18 deposits are related to a single counterparty, with amounts frequently matching the Scalpel unit price or multiples thereof.
Per the report, $40M in total transfers were processed by that single counterparty since January 2023, while more than $100 million was processed through Garantex deposit addresses used by that counterparty.
Meanwhile, in the case of Iran, the researchers have also traced a wallet purchasing drone parts from a Hong Kong-based supplier that has liquidity flows from the Iranian exchange Nobitex, IRGC wallets, and OFAC SDN Alireza Derakhshan, an Iranian national designated for facilitating crypto asset transfers on behalf of the regime.
"Inflows to a small subset of drone vendors spiked during the 12-day war between Iran and Israel in June 2025, then returned to pre-war levels when the ceasefire was concluded," the researchers said, adding that "it represents only a snapshot of limited vendor activity."
Unlock more exclusive Cybernews content on YouTube.
Your email address will not be published. Required fields are markedmarked