Russia-linked Grinex exchange halts operations after $13 million ‘state-backed’ hack

4 days ago

The exchange, formerly known arsenic Garantex and based successful Kyrgyzstan, has been sanctioned by the U.S., U.K. and EU for helping users bypass sanctions.

Apr 17, 2026, 9:15 a.m.

Grinex, a cryptocurrency speech fashionable with sanctions-avoiding Russians, suspended operations aft saying a cyber onslaught drained astir 1 cardinal rubles ($13 million) from its systems.

The platform, based successful Kyrgyzstan, disclosed the breach connected its Telegram transmission and a connection connected its website. It said the onslaught showed a level of coordination and method accomplishment that points to state-backed actors from “unfriendly states.”

“The integer footprints and quality of the onslaught bespeak an unprecedented level of resources and exertion disposable exclusively to the structures of unfriendly states,” the Grinex connection reads. “According to preliminary data, the onslaught was coordinated with the extremity of inflicting nonstop harm connected Russia's fiscal sovereignty.”

Grinex itself was placed nether sanctions by the U.S., U.K. and European Union past year. Officials successful Washington D.C. person said the exchange, primitively known arsenic Garantex, helped users determination funds astir restrictions done a ruble-backed stablecoin known arsenic A7A5.

The token allowed cross-border payments erstwhile Russia’s entree to the Swift inter-bank messaging strategy was chopped disconnected implicit the country’s penetration of Ukraine. Shortly aft being taken down, the level resurfaced arsenic Grinex.

The intermission successful trading leaves users incapable to entree funds portion the institution investigates. Access to its bureau successful Moscow was besides restricted.

Grinex has published a database of 54 affected wallet addresses and the drained amounts, astir of which were successful the signifier of USDT connected the TRON blockchain.

View source