Grinex, a Trading Platform Linked to the Russian Crypto Market, Suspends Withdrawals and Trading
Grinex, a trading platform linked to the Russian crypto market, has suspended withdrawals and trading, citing a "massive cyber attack." The exchange claims to have lost over 1 billion rubles, but blockchain analysis firm Elliptic estimates the actual stolen funds to be around $15 million USDT.
Elliptic also noted that the stolen funds were subsequently exchanged for TRX and ETH through the Tron and Ethereum networks to evade freezing. Grinex is viewed as a successor to the sanctioned exchange Garantex, which was previously targeted by U.S. authorities for facilitating the flow of hundreds of millions of dollars in illegal funds.
Source: Public Information
ABAB AI Insight
This incident is not just about a theft at an exchange, but rather highlights the structural vulnerabilities of a "successor platform" after sanctions. If Grinex is perceived as a continuation of Garantex, it faces not only hacker risks but also the triple pressures of sanctions, risk control, and fund traceability.
The rapid conversion of stolen funds to TRX and ETH indicates that the attackers are not merely seeking short-term cashing out, but are actively leveraging the liquidity and settlement characteristics of different chains to increase the difficulty of freezing. This reflects that crypto money laundering has evolved from "circular trading" to an industrialized process of "cross-chain, decentralized, and rapid settlement."
On a deeper level, the survival logic of such platforms is built on regulatory arbitrage, so once they encounter a security incident, external shocks can amplify into a credit crisis. For these exchanges, the real risk has never been just hackers, but rather their position in the interstices of global financial enforcement and on-chain tracking systems.