"flowed from two Binance accounts to Iranian entities with links to terrorist groups, a possible violation of global sanctions."