Finance & Crypto

US-Sanctioned Crypto Exchange Grinex Halts Operations After $15 Million Hack Blamed on 'Unfriendly States'

2026-05-02 13:36:58

Breaking: Grinex Shuts Down After Massive Heist

Grinex, a US-sanctioned cryptocurrency exchange registered in Kyrgyzstan, has announced it is halting operations following a theft of approximately $15 million in digital assets. The exchange accused hackers linked to "western special services" of orchestrating the attack, which it claims targeted Russian users.

US-Sanctioned Crypto Exchange Grinex Halts Operations After $15 Million Hack Blamed on 'Unfriendly States'
Source: feeds.arstechnica.com

Blockchain forensics firm TRM confirmed the breach, estimating the stolen assets at $15 million after identifying roughly 70 drained wallets — about 16 more than Grinex initially reported. Neither TRM nor fellow researcher Elliptic has disclosed how attackers bypassed the exchange's security measures.

Background

Grinex has been under almost constant cyber assault since its incorporation 16 months ago, the exchange said. The latest attacks specifically targeted Russian users, according to the company's statement.

The exchange has been under US sanctions, though it operates from Kyrgyzstan. Its shutdown marks a significant event in the ongoing tensions between Russia and Western nations over financial sovereignty.

Quote from Grinex

"The digital footprints and nature of the attack indicate an unprecedented level of resources and technology available exclusively to the structures of unfriendly states," Grinex said in a press release. "According to preliminary data, the attack was coordinated with the aim of causing direct damage to Russia's financial sovereignty."

US-Sanctioned Crypto Exchange Grinex Halts Operations After $15 Million Hack Blamed on 'Unfriendly States'
Source: feeds.arstechnica.com

What This Means

This heist underscores the vulnerability of even sanctioned financial platforms to state-level cyber threats. It also raises questions about the security of crypto exchanges operating in politically tense regions.

The targeting of Russian users suggests the attack may have broader geopolitical motivations, possibly aimed at undermining confidence in Russia's digital financial infrastructure. As investigations continue, the incident could escalate tensions between Moscow and Western capitals.

Impact on Cryptocurrency Community

The theft may further erode trust in centralized exchanges, especially those with ties to sanctioned entities. Users are advised to exercise caution and consider decentralized alternatives.

Grinex's shutdown leaves its remaining customers in limbo, with the exchange advising them to contact support for asset recovery — though the company warns that full restitution is unlikely.

Explore

7 Lessons in Designing for Amiability: What Vienna’s Intellectual Circle Teaches Us About Online Communities Rustup 1.29.0: All You Need to Know About the Latest Release 6 Critical Fixes in Rust 1.94.1 That Every Developer Needs to Understand NIO's April Deliveries Surge 23% Year-Over-Year Despite Monthly Dip Critical Authentication Bypass in cPanel & WHM: What You Need to Know About CVE-2026-41940