Roughly $13 million in person funds vanished from Russia crypto trade Grinex in April 2026, and by the point the trade suspended buying and selling, the cash was already transferring quick throughout blockchain networks towards a single vacation spot pockets. The halt left customers unable to entry their funds, withdraw balances, or execute trades, with no timeline given for restoration of companies.
Blockchain intelligence agency Elliptic confirmed the exploit and started monitoring the stolen belongings on-chain. The agency recognized Grinex as one of many largest venues for changing Russian rubles into crypto belongings, regardless of the trade being formally registered in Kyrgyzstan, a element that issues a fantastic deal for the customers now ready on solutions.
The total scope of the breach, and whether or not all affected funds may be accounted for, stays below lively investigation.
Grinex, one in every of Russia’s largest cryptocurrency exchanges, was attacked, leading to a lack of roughly 13 million USDT
Grinex reported a cyberattack that resulted in losses of about 1 billion rubles (roughly $13 million) and led to a suspension of buying and selling companies.…
— Wu Blockchain (@WuBlockchain) April 17, 2026
DISCOVER: The Subsequent 1000x Crypto Gem Earlier than It Lists on Binance
How Attackers Drained and Disappeared $13M From One of many Greatest Russia Crypto Exchanges
The attackers focused Grinex’s scorching wallets, the trade’s internet-connected storage used for processing stay trades, and drained a mixture of cryptocurrencies in a single coordinated operation. They then transformed these belongings into Tron ($TRX) tokens throughout decentralized and over-the-counter buying and selling venues, earlier than consolidating roughly 45.9 million TRX into one vacation spot pockets.
The selection of TRX was not unintended. Tron provides decrease transaction charges and quicker settlement instances than Ethereum, which reduces each value and complexity in the course of the laundering part, the sort of operational element that factors to planning, not opportunism. An nameless blockchain forensics analyst famous that “the speedy conversion to a single asset like $TRX, adopted by consolidation, signifies a extremely deliberate operation.”
Grinex publicly attributed the assault to “international intelligence companies”, particularly pointing fingers at Western state actors. Elliptic discovered no clear proof supporting that declare. The stolen funds stay traceable on-chain however haven’t been recovered. Grinex says it filed felony complaints and handed all out there proof to regulation enforcement.

The trade additionally has reported ties to A7A5, a ruble-backed stablecoin allegedly used to facilitate over $100 billion in sanctions-evasion exercise, a connection that provides a big layer of regulatory complexity to an already messy state of affairs.
DISCOVER: Finest Meme Coin ICOs to Put money into 2026
Why you possibly can belief 99Bitcoins
Established in 2013, 99Bitcoin’s crew members have been crypto consultants since Bitcoin’s Early days.
90hr+
Weekly Analysis
100k+
Month-to-month readers
50+
Professional contributors
2000+
Crypto Tasks Reviewed
Observe 99Bitcoins in your Google Information Feed
Get the most recent updates, developments, and insights delivered straight to your fingertips. Subscribe now!

