Grinex Suspends Operations After $13.7 Million Crypto Theft

Summary
Grinex suspended operations after a reported $13.7 million theft from wallets used by Russian users. Elliptic traced the funds through TRON and Ethereum; Grinex blamed Western intelligence, but no evidence supports that attribution.
Key points
- Grinex suspended operations following the reported theft of $13.7 million from wallets used by Russian users.
- Elliptic reported that the stolen funds moved to TRON and Ethereum addresses and were converted through SunSwap.
- Grinex blamed foreign intelligence agencies but provided no technical evidence identifying a perpetrator.
- TRM Labs identified 70 attacker addresses and reported a separate hack at Kyrgyzstan-based exchange TokenSpot.
- The article reports that Grinex is believed to be a rebrand of Garantex and operates the A7A5 ruble-backed stablecoin.
Article Details
- Victim Organization
- Grinex
- Incident Type
- Cryptocurrency theft from exchange wallets
- Affected Data Size
- $13.7 million in cryptocurrency was stolen.
- Operational Impact
- Grinex suspended operations.
- Ransom Or Extortion
- None reported.
- Claim Status
- confirmed
Products
Countries
KyrgyzstanKyrgyzstan-based crypto exchange Grinex suspended operations after a $13.7 million theft from wallets used by Russian users, an attack the exchange attributed to foreign (Western) intelligence agencies while blockchainRussiaRussian exchange Garantex and operator of the ruble-backed stablecoin A7A5, says the attack aimed to harm Russia’s financial sovereignty, but independent firms Elliptic and TRM Labs have not published technical
