.putty P7DocsFinance & Crypto
Related
Why Your Design System Needs Dialects (Not Just One Language)Lessons from the rsETH Exploit: A Guide to Choosing Secure Cross-Chain Token StandardsAnthropic Cracks Down on Unauthorized Secondary Market Share SalesAI-Driven Job Cuts Could Rebound, Fueling Demand for Specialized AI Roles8 Critical Facts Every Enterprise Must Know About the Shai-Hulud Worm AttackOndo Finance’s ONDO Token Rallies 68% as Real-World Asset Tokenization Gains MomentumWhy Your Design System Might Be Failing: The Case for 'Design Dialects'6 Essential Facts About docs.rs New Default Build Behavior

Kyrgyzstan Crypto Exchange Grinex Blames 'Unfriendly States' for $15 Million Heist, Shuts Down

Last updated: 2026-05-03 10:13:28 · Finance & Crypto

Breaking: Grinex Halts Operations After $15 Million Hack

Grinex, a US-sanctioned cryptocurrency exchange registered in Kyrgyzstan, announced it is shutting down after a massive heist that saw approximately $15 million in digital assets stolen. The exchange directly blamed "unfriendly states"—specifically referring to Western special services—for orchestrating the attack.

Kyrgyzstan Crypto Exchange Grinex Blames 'Unfriendly States' for $15 Million Heist, Shuts Down
Source: feeds.arstechnica.com

Blockchain forensics firm TRM Labs confirmed the theft, identifying roughly 70 drained addresses, about 16 more than Grinex initially reported. Neither TRM nor fellow research firm Elliptic has disclosed how the attackers breached Grinex's defenses.

Quote from Grinex

"The digital footprints and nature of the attack indicate an unprecedented level of resources and technology available exclusively to the structures of unfriendly states," Grinex stated. "According to preliminary data, the attack was coordinated with the aim of causing direct damage to Russia's financial sovereignty."

Background

Grinex, which launched just 16 months ago, has been under nearly constant cyber assault since its inception. The exchange was already on the US sanctions list for allegedly facilitating financial activities linked to Russia. The latest attacks, according to Grinex, specifically targeted Russian users of the platform.

This incident marks one of the largest heists involving a sanctioned exchange operating in Central Asia. The $15 million figure, adjusted upward from Grinex's initial $13 million estimate, highlights the scale of the operation.

Kyrgyzstan Crypto Exchange Grinex Blames 'Unfriendly States' for $15 Million Heist, Shuts Down
Source: feeds.arstechnica.com

What This Means

The shutdown of Grinex underscores the growing vulnerability of cryptocurrency exchanges in regions subject to Western sanctions. State-backed hacking groups are increasingly using crypto platforms as a battleground for economic warfare.

For Russia, the loss of a sanctioned exchange that served its citizens raises questions about the security of alternative financial channels. For the global crypto industry, it signals a new era of targeted, high-resource cyberattacks that smaller exchanges may be ill-equipped to fend off.

Key Figures

  • $15 million: Total value of stolen assets (per TRM Labs)
  • 70+ addresses: Drained wallets identified by investigators
  • 16 months: Time since Grinex began operations

As geopolitical tensions escalate, experts warn that more such heists are likely. "This is a warning shot for any exchange operating in contested financial zones," said a cybersecurity analyst who requested anonymity due to the sensitive nature of the case.

Read the full original article here.