Kyrgyzstan Crypto Exchange Grinex Blames 'Unfriendly States' for $15 Million Heist, Shuts Down
Breaking: Grinex Halts Operations After $15 Million Hack
Grinex, a US-sanctioned cryptocurrency exchange registered in Kyrgyzstan, announced it is shutting down after a massive heist that saw approximately $15 million in digital assets stolen. The exchange directly blamed "unfriendly states"—specifically referring to Western special services—for orchestrating the attack.

Blockchain forensics firm TRM Labs confirmed the theft, identifying roughly 70 drained addresses, about 16 more than Grinex initially reported. Neither TRM nor fellow research firm Elliptic has disclosed how the attackers breached Grinex's defenses.
Quote from Grinex
"The digital footprints and nature of the attack indicate an unprecedented level of resources and technology available exclusively to the structures of unfriendly states," Grinex stated. "According to preliminary data, the attack was coordinated with the aim of causing direct damage to Russia's financial sovereignty."
Background
Grinex, which launched just 16 months ago, has been under nearly constant cyber assault since its inception. The exchange was already on the US sanctions list for allegedly facilitating financial activities linked to Russia. The latest attacks, according to Grinex, specifically targeted Russian users of the platform.
This incident marks one of the largest heists involving a sanctioned exchange operating in Central Asia. The $15 million figure, adjusted upward from Grinex's initial $13 million estimate, highlights the scale of the operation.

What This Means
The shutdown of Grinex underscores the growing vulnerability of cryptocurrency exchanges in regions subject to Western sanctions. State-backed hacking groups are increasingly using crypto platforms as a battleground for economic warfare.
For Russia, the loss of a sanctioned exchange that served its citizens raises questions about the security of alternative financial channels. For the global crypto industry, it signals a new era of targeted, high-resource cyberattacks that smaller exchanges may be ill-equipped to fend off.
Key Figures
- $15 million: Total value of stolen assets (per TRM Labs)
- 70+ addresses: Drained wallets identified by investigators
- 16 months: Time since Grinex began operations
As geopolitical tensions escalate, experts warn that more such heists are likely. "This is a warning shot for any exchange operating in contested financial zones," said a cybersecurity analyst who requested anonymity due to the sensitive nature of the case.
Read the full original article here.
Related Articles
- How to Unlock the Philippines' Offshore Wind Potential: A Step-by-Step Guide
- Beyond Consistency: Why Design Systems Need Dialects
- Microsoft Open-Sources Azure Integrated HSM to Reinforce Cloud Security and Transparency
- The 2026 OpenPGP Email Summit: Key Developments in Encrypted Email
- From Legacy to Ledger: A Step-by-Step Guide to Adopting Stellar Blockchain for Sovereign Financial Services
- Cloudflare Launches Post-Quantum Encryption for IPsec to Thwart Future Quantum Attacks
- TradeXYZ Unveils Pre-IPO Perpetuals to Revolutionize Pre-Listing Price Discovery
- Apple Quietly Ends $599 Mac Mini: Entry Price Now $799 with Doubled Storage