TRM says a post-strike spike in Nobitex wallet activity looked like routine liquidity moves, even as Chainalysis flagged higher outflows from Iranian exchanges overall.