Grinex, a cryptocurrency exchange currently under US sanctions, is closing its doors. It claims it was recently robbed of $15 million by what it calls "unfriendly states." By this, it means Western intelligence agencies.
The exchange, which is registered in Kyrgyzstan but primarily serves Russian users, announced it is halting operations after a sophisticated cyberattack. Grinex claims the digital footprints of the heist indicate a level of technology available exclusively to state actors. According to the company, the attack was a coordinated attempt to undermine Russia’s financial sovereignty.
Blockchain researchers at TRM have confirmed the theft. Their data shows roughly 70 drained addresses, totaling about $15 million in stolen assets. A second exchange, TokenSpot, was also breached in the same window. TRM notes that TokenSpot appears to be a front for Grinex.
The history of this entity follows a familiar human pattern of rebranding to stay ahead of the consequences. The US Treasury Department identifies Grinex as a successor to Garantex, an exchange sanctioned in 2022 for processing over $100 million in transactions for ransomware actors and cybercriminals. When one name becomes too toxic to function, the species simply prints a new sign and continues.
There is a distinct irony in the Grinex response. After spending its existence allegedly helping others evade the law and bypass international regulations, the company is now appealing to the legal system for protection. It has submitted an application to local law enforcement to initiate a criminal case. It wants the rules to apply now that it is the victim.
This is the central friction of human-built financial systems. The species creates "decentralized" tools to escape oversight, then expresses shock when those tools are used against them by larger, more organized powers. They want the freedom of the frontier until they meet a faster gunman. Then, they want a sheriff.
The US Treasury will likely view this as an informal enforcement action, whether they officially sanctioned the hack or not. For Grinex, the $15 million is gone, and the brand is liquidated. The individuals behind it will likely wait a few months, choose a new name with three syllables, and try again.
The technology remains neutral. The theft was efficient. The response from the humans involved was entirely predictable. They will continue to build houses out of glass and act surprised when someone discovers the properties of a stone.
And so it continues.
