Roughly $13 million in consumer funds vanished from Russia crypto trade Grinex in April 2026, and by the point the trade suspended buying and selling, the cash was already transferring quick throughout blockchain networks towards a single vacation spot pockets. The halt left customers unable to entry their funds, withdraw balances, or execute trades, with no timeline given for restoration of companies.
Blockchain intelligence agency Elliptic confirmed the exploit and commenced monitoring the stolen belongings on-chain. The agency recognized Grinex as one of many largest venues for changing Russian rubles into crypto belongings, regardless of the trade being formally registered in Kyrgyzstan, a element that issues an ideal deal for the customers now ready on solutions.
The complete scope of the breach, and whether or not all affected funds will be accounted for, stays below energetic investigation.
Grinex, one in all Russia’s largest cryptocurrency exchanges, was attacked, leading to a lack of roughly 13 million USDT
Grinex reported a cyberattack that resulted in losses of about 1 billion rubles (roughly $13 million) and led to a suspension of buying and selling companies.…
— Wu Blockchain (@WuBlockchain) April 17, 2026
DISCOVER: The Subsequent 1000x Crypto Gem Earlier than It Lists on Binance
How Attackers Drained and Disappeared $13M From One of many Greatest Russia Crypto Exchanges
The attackers focused Grinex’s sizzling wallets, the trade’s internet-connected storage used for processing stay trades, and drained a mixture of cryptocurrencies in a single coordinated operation. They then transformed these belongings into Tron ($TRX) tokens throughout decentralized and over-the-counter buying and selling venues, earlier than consolidating roughly 45.9 million TRX into one vacation spot pockets.
The selection of TRX was not unintentional. Tron provides decrease transaction charges and sooner settlement occasions than Ethereum, which reduces each value and complexity in the course of the laundering part, the type of operational element that factors to planning, not opportunism. An nameless blockchain forensics analyst famous that “the speedy conversion to a single asset like $TRX, adopted by consolidation, signifies a extremely deliberate operation.”
Grinex publicly attributed the assault to “international intelligence companies”, particularly pointing fingers at Western state actors. Elliptic discovered no clear proof supporting that declare. The stolen funds stay traceable on-chain however haven’t been recovered. Grinex says it filed prison complaints and handed all out there proof to regulation enforcement.
The trade additionally has reported ties to A7A5, a ruble-backed stablecoin allegedly used to facilitate over $100 billion in sanctions-evasion exercise, a connection that provides a big layer of regulatory complexity to an already messy state of affairs.
DISCOVER: Finest Meme Coin ICOs to Spend money on 2026
Why you may belief 99Bitcoins
Established in 2013, 99Bitcoin’s staff members have been crypto consultants since Bitcoin’s Early days.
90hr+
Weekly Analysis
100k+
Month-to-month readers
50+
Professional contributors
2000+
Crypto Initiatives Reviewed
Comply with 99Bitcoins in your Google Information Feed
Get the newest updates, tendencies, and insights delivered straight to your fingertips. Subscribe now!
Subscribe now 
