Sanctioned Russia-Linked Exchange Grinex Suspends Operations Following Alleged Cyberattack

Grinex, the sanctioned successor to Garantex, announced a reported 1 billion ruble (~$13.7M) cyberattack and published the addresses involved; on-chain analysis shows the stolen fiat-backed stablecoins were quickly swapped into Tron (TRX) via a Tron-based DEX previously used by Garantex, a laundering tactic that conflicts with Grinex's claim of a Western intelligence seizure and raises the possibility of criminal theft, insider activity, or a false-flag operation. Chainalysis is monitoring the addresses and has labeled them for customers to track downstream movement.