Grinex hit by cyberattack
Incident
Summary
Hide ▲
Show ▼
Grinex confirmed a hack that led it to suspend operations, with $13.7 million stolen and Russian users’ wallets affected. The incident matters because the exchange’s core service was interrupted and the theft touched customer funds across its crypto-ruble operations.
Related Happenings
Operation Atlantic approval-phishing takedown
Law Enforcement
First: 13.04.2026 11:00
Last: 13.04.2026 11:00
Sources 1
About this happening:
A **UK-led** cross-border operation carried out a **takedown** of **approval phishing** crypto fraud networks, freezing **$12m** and identifying **more than 20,000 victims**. The...
Operation Atlantic approval-phishing takedown
Law EnforcementAbout this happening: A **UK-led** cross-border operation carried out a **takedown** of **approval phishing** crypto fraud networks, freezing **$12m** and identifying **more than 20,000 victims**. The...
Approval phishing crypto wallet fraud campaign
Campaign
First: 13.04.2026 11:00
Last: 13.04.2026 11:00
Sources 1
About this happening:
**Approval phishing** fraud networks were identified at scale, with **more than 20,000 victims** and at least **$33m** in additional stolen crypto tied to the operation. The fraud...
Approval phishing crypto wallet fraud campaign
CampaignAbout this happening: **Approval phishing** fraud networks were identified at scale, with **more than 20,000 victims** and at least **$33m** in additional stolen crypto tied to the operation. The fraud...
Timeline
-
20.04.2026 12:00 1 articles · 1mo ago
Grinex blames Western intelligence agencies for theft
Attribution UpdateGrinex said a large-scale cyber-attack by foreign intelligence agencies forced it to suspend operations after one billion rubles ($13.2m) was stolen from Russian customers, and the exchange filed a criminal complaint and shared the destination crypto address with law enforcers. Chainalysis disputed the attribution, saying the exfiltrated funds were quickly swapped via a Tron-based decentralized exchange (DEX) into TRX, a pattern more consistent with criminal laundering or a possible false flag than a state-backed raid.
Show sources
- Crypto Exchange Grinex Blames Western Spies for $13m Theft — www.infosecurity-magazine.com — 20.04.2026 12:00
-
17.04.2026 18:08 1 articles · 1mo ago
Grinex hit by cyberattack
Initial Disclosure**Grinex** first disclosed that it had been **hacked** and had **suspended operations** after the theft of **$13.7 million** from user wallets. The initial impact was immediate service interruption for a named crypto exchange with Russian-user exposure.
Show sources
- Grinex exchange blames "Western intelligence" for $13.7M crypto hack — www.bleepingcomputer.com — 17.04.2026 18:08