{"id":8488,"date":"2026-04-17T08:43:39","date_gmt":"2026-04-17T08:43:39","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=8488"},"modified":"2026-04-17T08:43:39","modified_gmt":"2026-04-17T08:43:39","slug":"15m-crypto-hack-forces-grinex-shutdown-amid-claims-of-state-level-attack","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=8488","title":{"rendered":"$15M Crypto Hack Forces Grinex Shutdown Amid Claims of State-Level Attack"},"content":{"rendered":"

<\/p>\n

\n
\n
\n
    \n
  • Blockchain analytics firm Elliptic estimates approximately US$15 million in USDT was drained from wallets linked to Grinex.<\/span><\/li>\n
  • Stolen funds were routed through Tron and Ethereum and converted into TRX and ETH, likely to avoid potential freezing by Tether, which can blacklist USDT tied to illicit activity.<\/span><\/li>\n
  • Grinex is widely identified as a successor to sanctioned exchange Garantex, which was shut down by US authorities last year for facilitating hundreds of millions in ransomware and darknet-linked flows.<\/span><\/li>\n<\/ul>\n<\/div>\n<\/div>\n

    Grinex, a Kyrgyzstan-registered crypto exchange tied to Russia\u2019s digital asset market, halted withdrawals and trading on Thursday after what it described as a large-scale cyberattack on its wallet infrastructure.<\/p>\n

    The exchange said in a notice on its website that more than 1 billion rubles, or about US$13.1 million (AU$18.3 million), had been stolen.<\/p>\n

    It also described the breach as a coordinated attack meant to damage Russia\u2019s financial sovereignty and suggested hostile state actors were behind it, but provided no evidence to support that claim.<\/p>\n

    Elliptic said the stolen funds moved through addresses on the Tron and Ethereum networks before being converted into TRX and ETH. That step likely reduced the risk of the assets being frozen, since Tether can blacklist USDT linked to illicit activity.<\/p>\n

    A wallet identified by Grinex still held about 45.9 million TRX worth more than US$15 million (AU$21 million), indicating that most of the stolen assets may have been consolidated into one address after the initial transfers.\u00a0<\/p>\n

    It remains unclear (and worrisome) why the exchange\u2019s estimate of the loss was lower than Elliptic\u2019s figure.<\/p>\n

    Related: Trump Meme Coin Event Sees 90% Drop in VIP Buy-In as Hype Cools<\/strong><\/p>\n

    Garantex\u2019s Shadow<\/h2>\n

    The incident also renewed scrutiny on Grinex\u2019s role in Russia-linked crypto flows. The platform is widely viewed as a successor to Garantex, the sanctioned exchange targeted by US authorities for handling hundreds of millions of dollars tied to ransomware and darknet markets.\u00a0<\/p>\n

    Elliptic has said the two exchanges likely share common ownership and management.<\/p>\n

    After Garantex was shut down, users and liquidity moved to replacement venues, with Grinex becoming a major hub for ruble-to-crypto trading and for the ruble-backed stablecoin A7A5. Elliptic estimates A7A5 has processed more than US$100 billion (AU$140 billion) in transactions.<\/p>\n

    US authorities have already acted against that network. The US Secret Service and Elliptic previously froze US$26 million (AU$36.4 million) in Garantex-linked stablecoins.<\/p>\n

    Read more: XRPL Pushes Into Wall Street Territory With Privacy-Focused Upgrade<\/strong><\/p>\n<\/p><\/div>\n

    Blockchain,Hackers#15M #Crypto #Hack #Forces #Grinex #Shutdown #Claims #StateLevel #Attack1776415419<\/p>\n","protected":false},"excerpt":{"rendered":"

    Blockchain analytics firm Elliptic estimates approximately US$15 million in USDT was drained from wallets linked to Grinex. Stolen funds were routed through Tron and Ethereum and converted into TRX and ETH, likely to avoid potential freezing by Tether, which can blacklist USDT tied to illicit activity. Grinex is widely identified as a successor to sanctioned<\/p>\n","protected":false},"author":1,"featured_media":8489,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[4073,1280,404,62,3109,4074,652,1794,4075],"class_list":["post-8488","post","type-post","status-publish","format-standard","has-post-thumbnail","category-bitcoin","tag-15m","tag-attack","tag-claims","tag-crypto","tag-forces","tag-grinex","tag-hack","tag-shutdown","tag-statelevel"],"yoast_head":"\n$15M Crypto Hack Forces Grinex Shutdown Amid Claims of State-Level Attack - Crypto News: Latest Cryptocurrency News and Analysis<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.uk.com\/?p=8488\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"$15M Crypto Hack Forces Grinex Shutdown Amid Claims of State-Level Attack\" \/>\n<meta property=\"og:description\" content=\"Blockchain analytics firm Elliptic estimates approximately US$15 million in USDT was drained from wallets linked to Grinex. Stolen funds were routed through Tron and Ethereum and converted into TRX and ETH, likely to avoid potential freezing by Tether, which can blacklist USDT tied to illicit activity. Grinex is widely identified as a successor to sanctioned\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.uk.com\/?p=8488\" \/>\n<meta property=\"og:site_name\" content=\"Crypto News: Latest Cryptocurrency News and Analysis\" \/>\n<meta property=\"article:published_time\" content=\"2026-04-17T08:43:39+00:00\" \/>\n<meta name=\"author\" content=\"\u884c\u653f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u884c\u653f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=8488\",\"url\":\"https:\/\/cryptonews.uk.com\/?p=8488\",\"name\":\"$15M Crypto Hack Forces Grinex Shutdown Amid Claims of State-Level Attack - Crypto News: Latest Cryptocurrency News and Analysis\",\"isPartOf\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=8488#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=8488#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/04\/82412.webp.webp\",\"datePublished\":\"2026-04-17T08:43:39+00:00\",\"author\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\"},\"breadcrumb\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=8488#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptonews.uk.com\/?p=8488\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=8488#primaryimage\",\"url\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/04\/82412.webp.webp\",\"contentUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/04\/82412.webp.webp\",\"width\":1200,\"height\":675},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=8488#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptonews.uk.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"$15M Crypto Hack Forces Grinex Shutdown Amid Claims of State-Level Attack\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptonews.uk.com\/#website\",\"url\":\"https:\/\/cryptonews.uk.com\/\",\"name\":\"Crypto News: Latest Cryptocurrency News and Analysis\",\"description\":\"Latest Crypto & Bitcoin News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cryptonews.uk.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\",\"name\":\"\u884c\u653f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"caption\":\"\u884c\u653f\"},\"sameAs\":[\"http:\/\/demo3.aiwalls.com\/coinbase\"],\"url\":\"https:\/\/cryptonews.uk.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"$15M Crypto Hack Forces Grinex Shutdown Amid Claims of State-Level Attack - Crypto News: Latest Cryptocurrency News and Analysis","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.uk.com\/?p=8488","og_locale":"en_US","og_type":"article","og_title":"$15M Crypto Hack Forces Grinex Shutdown Amid Claims of State-Level Attack","og_description":"Blockchain analytics firm Elliptic estimates approximately US$15 million in USDT was drained from wallets linked to Grinex. Stolen funds were routed through Tron and Ethereum and converted into TRX and ETH, likely to avoid potential freezing by Tether, which can blacklist USDT tied to illicit activity. Grinex is widely identified as a successor to sanctioned","og_url":"https:\/\/cryptonews.uk.com\/?p=8488","og_site_name":"Crypto News: Latest Cryptocurrency News and Analysis","article_published_time":"2026-04-17T08:43:39+00:00","author":"\u884c\u653f","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u884c\u653f","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cryptonews.uk.com\/?p=8488","url":"https:\/\/cryptonews.uk.com\/?p=8488","name":"$15M Crypto Hack Forces Grinex Shutdown Amid Claims of State-Level Attack - Crypto News: Latest Cryptocurrency News and Analysis","isPartOf":{"@id":"https:\/\/cryptonews.uk.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.uk.com\/?p=8488#primaryimage"},"image":{"@id":"https:\/\/cryptonews.uk.com\/?p=8488#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/04\/82412.webp.webp","datePublished":"2026-04-17T08:43:39+00:00","author":{"@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf"},"breadcrumb":{"@id":"https:\/\/cryptonews.uk.com\/?p=8488#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.uk.com\/?p=8488"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/?p=8488#primaryimage","url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/04\/82412.webp.webp","contentUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/04\/82412.webp.webp","width":1200,"height":675},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.uk.com\/?p=8488#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.uk.com\/"},{"@type":"ListItem","position":2,"name":"$15M Crypto Hack Forces Grinex Shutdown Amid Claims of State-Level Attack"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.uk.com\/#website","url":"https:\/\/cryptonews.uk.com\/","name":"Crypto News: Latest Cryptocurrency News and Analysis","description":"Latest Crypto & Bitcoin News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.uk.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf","name":"\u884c\u653f","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","caption":"\u884c\u653f"},"sameAs":["http:\/\/demo3.aiwalls.com\/coinbase"],"url":"https:\/\/cryptonews.uk.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/8488","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8488"}],"version-history":[{"count":0,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/8488\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/media\/8489"}],"wp:attachment":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8488"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8488"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8488"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}