Russian-Linked Crypto Exchange Grinex Suspends Operations After $13.1M Cyber Heist
A Russia-affiliated cryptocurrency exchange, Grinex, has halted operations following a cyberattack that resulted in the theft of 1 billion roubles ($13.1 million). The Kyrgyzstan-based platform, sanctioned by the U.S., UK, and EU in 2023, accused "foreign intelligence services" of orchestrating the breach, though Reuters could not independently verify the claim.
In a Telegram statement, Grinex alleged the attack was carried out with "unprecedented resources" and aimed to undermine Russia’s financial sovereignty. The exchange has been linked to efforts to bypass Western sanctions, including through the A7A5 stablecoin, a Russian rouble-backed digital asset.
Russia, cut off from the SWIFT banking system since its invasion of Ukraine, has increasingly relied on cryptocurrency to sustain foreign trade. The incident highlights the growing cyber risks facing sanctioned financial platforms as geopolitical tensions escalate.
Grinex cybersecurity rating report: https://www.rankiteo.com/company/grinex-czech-republic
"id": "GRI1776385436",
"linkid": "grinex-czech-republic",
"type": "Cyber Attack",
"date": "4/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'FinTech, Cryptocurrency',
'location': 'Kyrgyzstan',
'name': 'Grinex',
'type': 'Cryptocurrency Exchange'}],
'description': 'A Russia-affiliated cryptocurrency exchange, Grinex, has '
'halted operations following a cyberattack that resulted in '
'the theft of 1 billion roubles ($13.1 million). The '
'Kyrgyzstan-based platform, sanctioned by the U.S., UK, and EU '
"in 2023, accused 'foreign intelligence services' of "
'orchestrating the breach. The attack was allegedly carried '
"out with 'unprecedented resources' and aimed to undermine "
'Russia’s financial sovereignty. The exchange has been linked '
'to efforts to bypass Western sanctions, including through the '
'A7A5 stablecoin, a Russian rouble-backed digital asset.',
'impact': {'brand_reputation_impact': 'High (sanctioned entity, geopolitical '
'scrutiny)',
'downtime': 'Operations suspended',
'financial_loss': '$13.1 million',
'operational_impact': 'Halt in trading and transactions',
'systems_affected': 'Cryptocurrency exchange operations'},
'motivation': 'Undermine Russia’s financial sovereignty, geopolitical '
'tensions',
'references': [{'source': 'Reuters'}, {'source': 'Grinex Telegram statement'}],
'regulatory_compliance': {'regulations_violated': 'Sanctions by U.S., UK, and '
'EU (2023)'},
'response': {'communication_strategy': 'Telegram statement',
'containment_measures': 'Operations suspended'},
'threat_actor': 'Foreign intelligence services (alleged)',
'title': 'Russian-Linked Crypto Exchange Grinex Suspends Operations After '
'$13.1M Cyber Heist',
'type': 'Cyber Heist'}