Back Securityaffairs.Co

Kyrgyzstan-based crypto exchange Grinex shuts down after $13.7M cyber heist, blames Western Intelligence

Securityaffairs.Co •Pierluigi Paganini • April 17, 2026

Grinex halted operations after a $13.7M hack, blaming Western intelligence. Stolen funds came from wallets of Russian users on the platform. Kyrgyz crypto exchange Grinex halted operations after a threat actor stole $13.7 million in a cyber attack that the company attributes to Western intelligence agencies. The stolen funds belonged to Russian users, as the […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

$15M Grinex Cyberattack Halts Operations Amid Allegations of Foreign Intelligence Involvement Grinex, a Kyrgyzstan-based cryptocurrency exchange linked to Russia, suspended its operations following a cyberattack that resulted in the theft of over 1 billion rubles (approximately $13 million). The attack, which Grinex attributes to foreign intelligence services, involved a sophisticated breach of its wallet infrastructure. The stolen funds were rapidly moved across multiple blockchain networks, including Ethereum and Tron, to obscure their trail. Grinex has claimed that the attack aimed to undermine Russia's financial sovereignty, although no concrete evidence has been provided to support this assertion. The exchange has filed a police report and is currently assessing the damage. This incident highlights ongoing vulnerabilities within the cryptocurrency exchange ecosystem, particularly regarding hot wallet security. The attack follows a trend of increasing cyber threats targeting crypto exchanges in 2025 and 2026. 19 sources 74

Extracted Entities

Companies (1)

Grinex