Roughly $13 million in person funds vanished from Russia crypto alternate Grinex in April 2026, and by the point the alternate suspended buying and selling, the cash was already transferring quick throughout blockchain networks towards a single vacation spot pockets. The halt left customers unable to entry their funds, withdraw balances, or execute trades, with no timeline given for restoration of companies.
Blockchain intelligence agency Elliptic confirmed the exploit and started monitoring the stolen belongings on-chain. The agency recognized Grinex as one of many largest venues for changing Russian rubles into crypto belongings, regardless of the alternate being formally registered in Kyrgyzstan, a element that issues a fantastic deal for the customers now ready on solutions.
The total scope of the breach, and whether or not all affected funds will be accounted for, stays below lively investigation.
Grinex, certainly one of Russia’s largest cryptocurrency exchanges, was attacked, leading to a lack of roughly 13 million USDT
Grinex reported a cyberattack that resulted in losses of about 1 billion rubles (roughly $13 million) and led to a suspension of buying and selling companies.…
— Wu Blockchain (@WuBlockchain) April 17, 2026
DISCOVER: The Subsequent 1000x Crypto Gem Earlier than It Lists on Binance
How Attackers Drained and Disappeared $13M From One of many Largest Russia Crypto Exchanges
The attackers focused Grinex’s sizzling wallets, the alternate’s internet-connected storage used for processing reside trades, and drained a mixture of cryptocurrencies in a single coordinated operation. They then transformed these belongings into Tron ($TRX) tokens throughout decentralized and over-the-counter buying and selling venues, earlier than consolidating roughly 45.9 million TRX into one vacation spot pockets.
The selection of TRX was not unintended. Tron provides decrease transaction charges and sooner settlement occasions than Ethereum, which reduces each value and complexity in the course of the laundering part, the type of operational element that factors to planning, not opportunism. An nameless blockchain forensics analyst famous that “the fast conversion to a single asset like $TRX, adopted by consolidation, signifies a extremely deliberate operation.”
Grinex publicly attributed the assault to “overseas intelligence companies”, particularly pointing fingers at Western state actors. Elliptic discovered no clear proof supporting that declare. The stolen funds stay traceable on-chain however haven’t been recovered. Grinex says it filed legal complaints and handed all obtainable proof to regulation enforcement.
The alternate additionally has reported ties to A7A5, a ruble-backed stablecoin allegedly used to facilitate over $100 billion in sanctions-evasion exercise, a connection that provides a big layer of regulatory complexity to an already messy state of affairs.
DISCOVER: Greatest Meme Coin ICOs to Put money into 2026
Why you may belief 99Bitcoins
Established in 2013, 99Bitcoin’s group members have been crypto specialists since Bitcoin’s Early days.
90hr+
Weekly Analysis
100k+
Month-to-month readers
50+
Skilled contributors
2000+
Crypto Initiatives Reviewed
Comply with 99Bitcoins in your Google Information Feed
Get the newest updates, developments, and insights delivered straight to your fingertips. Subscribe now!
Subscribe now 
