$13.74M Hack Shuts Down Sanctioned Grinex Exchange After Intelligence Claims

What’s new: Grinex, a cryptocurrency exchange sanctioned by the U.K. and U.S., has suspended operations following a $13.74 million hack attributed to foreign intelligence agency involvement. The attack resulted in the theft of over 1 billion rubles in user funds and is believed to have been aimed at undermining Russia’s financial sovereignty. The incident occurred on April 15, 2026, and involved the rapid conversion of stolen stablecoins to avoid asset freezing.

Who’s affected

Users of the Grinex exchange are directly impacted due to the loss of funds. Additionally, TokenSpot, a Kyrgyzstan-based exchange linked to Grinex, experienced a minor theft during the same timeframe.

What to do

• Monitor any transactions related to Grinex and TokenSpot for unusual activity.
• Review security protocols and ensure that systems are updated to prevent similar breaches.
• Stay informed about developments regarding sanctions and regulatory compliance related to cryptocurrency exchanges.

Sources

• The Hacker News