Sanctioned cryptocurrency platform Grinex suspended operations following a sophisticated cyberattack that drained $13.1 million from 54 wallets. The Kyrgyzstan-registered exchange, with alleged ties to Russian financial infrastructure, confirmed the breach involved foreign intelligence signatures—prompting criminal investigations.

The incident spotlights Grinex's controversial A7A5 stablecoin, previously flagged by Western governments for facilitating sanctions evasion. Blockchain analysts identified broader attack patterns suggesting coordinated exploitation of the exchange's role as a replacement for the shuttered Garantex platform.

This breach compounds regulatory scrutiny on shadow financial networks leveraging crypto to bypass traditional banking restrictions. The theft's technical sophistication and geopolitical undertones reflect escalating risks in jurisdictions with weak compliance frameworks.