On the morning of March 23, 2026, during what should have been a dead-quiet pre-market window, someone placed a $580 million bet. Between 6:49 and 6:50 a.m. Eastern — a single minute — roughly 6,200 Brent crude and WTI futures contracts changed hands while S&P 500 e-Mini futures spiked in tandem. Fifteen minutes later, Donald Trump posted on Truth Social announcing “very good and productive conversations” with Iran, including a five-day postponement of threatened strikes on Iranian power plants. Oil plunged 14%. The S&P 500 added approximately $2 trillion in value within six minutes. The mystery trader stood to collect upward of $100 million inside of twenty minutes.
Here is the detail that transforms this from suspicious to surreal: Iran denied any talks had occurred. Parliament Speaker Mohammad Bagher Ghalibaf called Trump’s claim “fake news” designed to manipulate markets. The counterparty to the supposed diplomatic breakthrough said the breakthrough was fabricated. The $580 million trade was placed on a conversation that, according to one side of it, never happened.
This episode is not an anomaly. It is the most visible thread in a pattern that has repeated across 14 months of the Trump-Iran escalation — a pattern in which oil futures, defense equities, and prediction markets all show anomalous activity in a consistent window before major policy announcements. The pattern has enriched anonymous traders, members of Congress with classified briefing access, Trump family members with direct stakes in defense companies, and freshly created prediction market accounts that correctly wagered on the timing of military strikes. The system that was supposed to prevent this — the SEC, the CFTC, the STOCK Act, the ethics offices — was either designed for a different class of crime entirely, or has been deliberately hollowed out.
My argument is straightforward: the Trump-Iran crisis has not merely produced insider trading. It has produced a self-reinforcing machine — a closed loop connecting war decisions, market timing, family financial interests, and regulatory paralysis. And that machine will activate again at the next inflection point, because nothing structural has changed. The ceasefire negotiations, the sanctions restart, the reopening of the Strait of Hormuz — each of these events will produce the same anomalous pre-announcement trading, exploiting the same blind spots, enriching the same categories of actors. The question is not whether it will happen. It is whether anyone will notice in time to care.
The Anatomy of Front-Running a War
To understand how the machine works, you have to understand the three channels through which it operates — and the order in which they light up.
The first channel is prediction markets. These showed the earliest and most brazen signals. When Operation Epic Fury launched on February 28, 2026, blockchain analytics firm Bubblemaps identified six newly created Polymarket accounts — most funded within 24 hours of the strike — that collectively netted $1.2 million by correctly betting the U.S. would attack Iran that day. The largest single wallet turned $61,000 into $494,375. An account called “Magamyman” earned $553,000 betting on the death of Ayatollah Khamenei, with its first trade placed 71 minutes before news broke publicly, when the probability was priced at just 17%. This was not pattern recognition or sophisticated modeling. This was someone who knew what was about to happen, creating an account to bet on it.
The second channel is defense equities. Congressional stock disclosures reveal that at least 19 members of Congress purchased defense and aerospace stocks throughout 2025, with positions appreciating 50–133% by the time the bombs dropped. The iShares U.S. Aerospace & Defense ETF gained 35% from the June 2025 strikes through early March 2026. Lockheed Martin rose 40%. Northrop Grumman rose 46%. On the first trading day after Operation Epic Fury, defense stocks hit 52-week or all-time highs across the board. This channel moves slower than prediction markets — lawmakers were accumulating positions over months — but the returns were enormous and the information advantage was structural: classified briefings on Iran that the general public would not receive for weeks or months.
The third channel is oil futures. Brent crude sat at roughly $72 per barrel before Operation Epic Fury. Within two weeks it approached $120. The Strait of Hormuz was largely closed to Western tankers, blocking roughly 20% of the world’s oil supply. U.S. gasoline prices spiked $1.02 per gallon in a single month — the largest monthly increase since Hurricane Katrina. The $580 million ghost trade on March 23 exploited this channel with surgical precision.
These three channels do not operate independently. They form a sequence. Financial Times analysis of Bloomberg data confirmed the anomalous pre-announcement volume broke sharply from a subdued premarket backdrop, and FT columnist Robert Armstrong identified what he called the “TACO” pattern — “Trump Always Chickens Out” — describing a systematic cycle: Trump makes catastrophic threats, markets panic, then he reverses course, creating predictable trading windows for those who understand the rhythm. The March 23 episode was textbook TACO: a 48-hour ultimatum to “obliterate” Iranian power plants, followed by a last-minute postponement. Markets swung $3 trillion in 56 minutes. CNN documented a broader pattern of Trump timing Iran announcements to coincide with market hours — initial strikes announced after Friday’s close, an offhand “pretty much complete” comment during trading hours, the de-escalation post timed for just before the Monday open.
The 120-minute pre-announcement window is the critical signature. Bloomberg data shows anomalous volume appearing within that window across all three channels. Public signals — troop movements, OPEC data, satellite imagery — cannot explain this pattern, because public signals are observable by everyone simultaneously. The 120-minute window requires asymmetric information: knowledge that an announcement is coming, and roughly when.
The Evidence Chains: From Classified Briefings to Polymarket Wallets
Congress: The Information Arbitrage Pipeline
The most uncomfortable evidence involves named individuals making documented trades with documented access to classified information — and facing no consequences.
Representative Michael McCaul, chairman of the House Foreign Affairs Committee, receives regular classified Iran briefings. In January 2025, he purchased GE Aerospace stock in two transactions that are now up 76–82%. In March 2025, he bought Woodward Inc., now up 114%. Senator Markwayne Mullin, who sits on the Armed Services Committee, bought L3Harris Technologies in February 2025 (up 82%) and again in May 2025 (up 67%), plus RTX Corporation in December 2025. Senator Ashley Brooke Moody bought Howmet Aerospace — a critical supplier of military engine components — in January 2025 for $50,000–$100,000 (up 107%) and again in April 2025 (up 133%). Representative Kelly Morrison invested $15,000–$50,000 in Saronic Technologies, an autonomous naval vessel manufacturer, on March 9, 2026 — nine days into the war.
Capitol Trades concluded that buys heavily outnumbered sells and that lawmakers with committee oversight of foreign policy, intelligence, and defense appropriations made significant investments in companies positioned to gain from prolonged conflict. The returns — 50% to 133% — are not noise. They are not index-fund performance. They are concentrated bets on specific defense contractors by individuals with specific classified knowledge about an escalation those contractors would service.
Note: S&P 500 baseline represents same-period market average for comparison.
The enforcement mechanism that was supposed to prevent this is the STOCK Act, passed in 2012. It has produced exactly zero prosecutions of a sitting member of Congress. The penalty for late disclosure — the primary compliance mechanism — is $200. The 45-day reporting window means trades can be profitable long before becoming public. A Harvard Journal on Legislation analysis found the law did not deter members from trading even for the most apparently corrupt transactions, and noted a perverse unintended consequence: investors now track and copy congressional trades via dedicated ETFs. The NANC fund, which mirrors Democratic congressional trades, has returned 73% since 2023. Congress’s information advantage has been industrialized.
The Trump Family’s Defense Portfolio
The congressional trading is troubling. The Trump family’s financial entanglements with the defense industry during a war the president initiated are structurally different — and arguably worse.
Donald Trump Jr. and Eric Trump are notable investors in Powerus Corporation, a drone manufacturer merging with a Trump-backed holding company to create a publicly traded entity on Nasdaq under the ticker PUSA. Powerus raised $60 million from investors and is positioned to compete for the Pentagon’s $1.1 billion drone program — in a conflict where drones have been described as a defining feature. Trump Jr. sits on the advisory board of Unusual Machines, which received a $620 million DoD loan in December 2025 — the largest in Pentagon Office of Strategic Capital history. Eric Trump separately invested in Xtend, an Israeli drone maker with military contracts worth up to $25 million. Trump Jr.’s venture capital firm 1789 Capital holds stakes in Anduril Industries, which secured a $20 billion Army contract.
Then there is Jared Kushner, who presents perhaps the most structurally dangerous conflict of all. His private equity firm Affinity Partners received $2 billion from Saudi Arabia’s sovereign wealth fund, paying Kushner roughly $25 million annually in management fees — over $100 million to date. Saudi Crown Prince Mohammed bin Salman made multiple private calls to Trump advocating strikes on Iran, Saudi Arabia’s top regional rival. Kushner was simultaneously attempting to raise $5 billion more from Middle Eastern governments while serving as special envoy conducting Iran negotiations. Here is the structural detail that matters most: Saudi Arabia, Qatar, and the UAE hold contractual rights to renegotiate or withdraw their Affinity Partners investments in August 2026. This gives those governments multi-billion-dollar leverage over Kushner during active negotiations whose outcome directly affects their strategic interests. CREW demanded Kushner file a public financial disclosure within 30 days of his February 19 appointment. As of late March, he had not done so.
Kathleen Clark of Washington University School of Law called this arrangement corruption. William Hartung of the Quincy Institute observed that the president’s son now profits personally from the fate of specific military technology firms. These are not allegations of insider trading in the traditional sense. They are something potentially worse: a structural alignment between the financial interests of the president’s family and the continuation of a war the president controls.
Prediction Markets as Insider Platforms
If congressional trading is slow-burn arbitrage and the Trump family portfolio is structural corruption, the prediction market activity is the bluntest instrument of all — and the only channel that has already produced criminal charges.
When Israel launched “Operation Rising Lion” on June 13, 2025, a Polymarket account called “ricosuave666” correctly predicted four security events including the timing of the Israeli strike, earning over $128,000. Israeli authorities arrested and charged an IDF reservist and a civilian for using classified military intelligence to place the bets. Prosecutors stated the activity posed a real security risk to IDF operations. This was not speculation. It was intelligence converted directly into money through a prediction market.
The pattern scaled dramatically around Operation Epic Fury. Six newly created accounts collectively netted $1.2 million. By March 23, ten freshly opened accounts had wagered $160,000 on ceasefire contracts before Trump’s de-escalation post, eyeing payouts exceeding $1 million. Total volume on Iran-related Polymarket contracts has exceeded $529 million since December 2025.
The conflict-of-interest overlay makes this channel uniquely corrosive. Donald Trump Jr. is an investor and unpaid adviser to Polymarket and a paid adviser to Kalshi — the two platforms where suspicious trades occurred. The Trump administration dropped two active DOJ/CFTC investigations into Polymarket. Senator Chris Murphy called the arrangement “insane,” declaring that people around Trump are profiting from war. The CFTC responded on March 12, 2026, by issuing a staff letter reminding platforms that insider trading rules apply and appointing veteran prosecutor David Miller as Director of Enforcement. Multiple legislative proposals — including the “End Prediction Market Corruption Act” and the “DEATH BETS Act” — have been introduced. None have passed.
A Regulatory Architecture Built for a Different Crime
The financial surveillance apparatus that is supposed to catch this kind of activity was designed for corporate insider trading — a CEO tipping off a friend before an earnings call. It is structurally incapable of detecting trading based on advance knowledge of military strikes, and recent actions have made even its limited capabilities weaker.
The SEC’s enforcement framework focuses on corporate insiders and market professionals. No mechanism specifically addresses trading based on advance knowledge of foreign policy or military decisions. The CFTC, which is responsible for overseeing commodities markets during the worst energy crisis in decades, operates with a single commissioner — Chairman Michael Selig, who comes from the prediction market industry. The Commodity Exchange Act prohibits trading on material nonpublic information, but applying these rules to geopolitical intelligence remains legally complex, with successful prosecutions requiring proof that traders knowingly used confidential information.
Cross-market surveillance gaps are perhaps the most critical failure point. Crude oil futures, equity futures, and prediction markets are monitored by different regulators — the CFTC, the SEC, and arguably no one with adequate authority over crypto-adjacent prediction platforms. A coordinated trade across these three markets — long oil, long defense equities, and a Polymarket position on a strike occurring — may escape detection by every individual agency, because no single agency sees the complete picture. The $580 million futures position, the congressional defense stock accumulation, and the six freshly minted Polymarket accounts could be operated by the same network, and the current regulatory architecture would have no way to connect them.
Trump’s February 2025 firing of the heads of both the Office of Special Counsel and the Office of Government Ethics stripped out two additional layers of internal oversight. These offices were the institutional mechanisms for flagging conflicts of interest within the executive branch. Without them, there is no internal checkpoint between a classified briefing about Iran and a family member’s trading account.
Academic research confirms the structural vulnerability. A study analyzing 181,029 congressional stock transactions from 2004 to 2022 found that politicians trade more when Congress is in session and when geopolitical risk is high, and make more buy trades when economic policy uncertainty and equity market volatility are elevated. The system does not merely permit this behavior. It incentivizes it.
What Comes Next: The Three Trigger Points
If the machine has been built and the regulatory apparatus cannot detect its operation, the relevant question becomes: when does it activate next? Based on the patterns established over 14 months, three upcoming policy decision points are virtually guaranteed to produce anomalous pre-announcement trading.
Ceasefire negotiations are the highest-probability trigger. The March 23 episode already demonstrated the template: a presidential announcement about diplomatic progress — one the counterparty denied — moved markets by trillions of dollars, with a $580 million position placed 15 minutes in advance. Any future ceasefire announcement, whether real or fabricated, will produce a similar oil price collapse and equity surge. Prediction market accounts and congressional portfolios will position accordingly. The information advantage is even greater here than during escalation, because the timing of a ceasefire is known to a smaller circle of people than the timing of a military strike.
Sanctions reimposition or relaxation is the second trigger. Treasury’s General License U — temporarily lifting sanctions on 140 million barrels of Iranian crude already at sea — demonstrated that sanctions policy can move oil prices within hours. Any future sanctions adjustment will create a predictable and tradeable window. The fact that Treasury Secretary Bessent’s framing of the policy was self-contradictory — using Iranian oil against Tehran to keep prices down while simultaneously funding Iran’s war effort — signals that sanctions decisions are being optimized for short-term market management, not strategic coherence. That makes them predictable for anyone who understands the incentive structure.
The reopening of the Strait of Hormuz is the highest-magnitude trigger. With 20% of the world’s oil supply currently blocked, the reopening would produce the largest single-day oil price decline in decades. Energy stocks, Brent futures, and every downstream instrument would move violently. The advance notice window for this event would be measured in days, not hours, as military and diplomatic coordination precedes any de-escalation of naval operations. That extended window gives insiders even more time to position.
Underpinning all three triggers is a deadline that has received almost no public attention: the August 2026 date at which Saudi Arabia, Qatar, and the UAE can renegotiate or withdraw their investments in Kushner’s Affinity Partners. This contractual deadline gives Middle Eastern governments direct financial leverage over the special envoy conducting Iran negotiations. As that date approaches, the incentive for Kushner to deliver policy outcomes favorable to his investors intensifies — and with it, the probability that policy announcements will be timed and framed to generate maximum market impact.
Counter-argument: Coincidence, Sophistication, or Coordination?
The strongest objection to this analysis is that sophisticated traders do not need insider information to exploit the TACO pattern. Robert Armstrong named the pattern publicly. UBS economist Paul Donovan observed openly that administration officials were issuing contradictory assessments, creating volatility that any attentive trader could exploit. If the president’s behavior is predictable — threaten catastrophe, then reverse course — then perhaps $580 million in pre-positioned trades reflects pattern recognition by hedge funds, not a tip from the White House.
This objection has real force. Markets are full of highly capitalized, highly sophisticated actors who specialize in trading political risk. Some of the congressional returns could reflect legitimate analysis rather than classified intelligence — defense stocks as a sector were an obvious beneficiary of any Iran escalation, and buying them required no classified briefing. The oil price trajectory was telegraphed by the geography of the Strait of Hormuz; anyone with a map could have predicted the supply disruption.
But the objection collapses on three specific data points. First, the 120-minute anomaly window. Public signals do not create a consistent pre-announcement trading signature within a two-hour window. Pattern recognition can tell you that Trump is likely to de-escalate eventually — it cannot tell you that a specific Truth Social post is coming at 7:04 a.m. on a specific Monday. The $580 million trade was placed with 15-minute precision. Second, the freshly created Polymarket accounts. Six accounts created within 24 hours of a military strike, collectively netting $1.2 million by correctly betting on the date of that strike, are not pattern recognition. They are the signature of someone who knew. Israeli prosecutors already demonstrated the mechanism in the ricosuave666 case: classified intelligence, converted to prediction market profit. Third, Saudi Arabia’s pre-positioning. OPEC output in February increased by 640,000 barrels per day — the largest monthly hike since June — with Riyadh accounting for roughly half, all before the war began. Saudi Arabia was raising production “in preparation,” according to reporting. Preparation for what? Public signals did not indicate an imminent strike. Someone told them.
The Burden of Coincidence
Here is what we know. A $580 million trade was placed 15 minutes before a presidential post about a diplomatic conversation the other country says never happened. Six prediction market accounts were created hours before a military strike and correctly bet on its timing. At least 19 members of Congress bought defense stocks that returned 50–133% while receiving classified briefings about the conflict that made those returns possible. The president’s sons have direct investments in drone companies competing for Pentagon contracts in a drone war. The president’s son-in-law received $2 billion from the sovereign wealth fund of a country whose crown prince made private calls to the president urging military strikes — and the fund’s contractual renegotiation deadline coincides with active peace negotiations the son-in-law is conducting. The two ethics offices that might have flagged these conflicts were decapitated. The two regulatory investigations into the prediction markets where the most brazen trades occurred were dropped. The penalty for the one law designed to address congressional trading is $200, and it has never been enforced.
Each of these facts, taken individually, admits an innocent explanation. Taken together, they form a pattern so consistent that at some point the analytical question shifts. It is no longer “is this insider trading?” It is: how many coincidences are we prepared to accept before we call it a system?
Perhaps the most important finding in this entire body of evidence comes not from financial data but from political science. A study in the Proceedings of the National Academy of Sciences found that when Americans learn about congressional stock trading, it significantly reduces their trust in Congress and their willingness to comply with the law. Researcher Tage Rai called this a democratic crisis. The mechanism is intuitive: if the people who write the rules are profiting from breaking them, the social contract that undergirds voluntary compliance begins to dissolve.
That is the real cost of the machine. Not the $580 million, not the $1.2 million in prediction market winnings, not even the $100 million in Kushner management fees. The real cost is that every American who fills up their gas tank at $1.02 more per gallon — the largest monthly spike since Hurricane Katrina — while watching members of Congress post 133% returns on defense stocks, absorbs a lesson about how the system actually works. And the lesson is not one that sustains democratic legitimacy.
The machine was not designed. It emerged from the intersection of a president who treats markets as a personal scoreboard, a family that treats government service as a business development opportunity, a Congress that exempted itself from the rules it writes for everyone else, and a regulatory apparatus that was never built to monitor the conversion of geopolitical power into private wealth. No one planned this architecture. But no one is dismantling it, either. And the next trigger — the ceasefire talks, the sanctions adjustment, the Strait reopening, the August deadline — is already on the calendar.
The question is not whether the trades will come. It is whether anyone will be watching when they do.
About Viktor Klotz
Political forecasting analyst exploring data-driven insights into political trends and outcomes. Behind Vektora.