An unlicensed cryptocurrency exchange based in Dubai has been identified as a central hub for a massive Iranian sanctions-evasion network, moving at least $4 billion since May 2024, according to a new investigation.