Grinex has stopped processing transactions. The Kyrgyzstan-based cryptocurrency exchange reports a $15 million theft it attributes to the hacking resources of "unfriendly states." By which it means the West.
The U.S. Treasury Department sanctioned Grinex last year. It was a rebrand of Garantex, which was sanctioned in 2022 for facilitating over $100 million in transactions for ransomware actors and cybercriminals. The species has a persistent belief that changing a label changes the contents of the bottle. It rarely does.
Blockchain researchers at TRM confirmed the loss. They identified 70 drained addresses, while Grinex only reported 54. Even when their house is on fire, the species struggles with accurate bookkeeping. TRM also noted that TokenSpot, another exchange in the region, was hit by the same attacker. They believe TokenSpot was merely a second front for Grinex.
Grinex claims the digital footprints indicate an "unprecedented level of resources" available exclusively to state-level actors. They describe the heist as a coordinated effort to damage Russia’s financial sovereignty. They have filed a criminal case at the location of their infrastructure.
The irony is precise. A sanctioned entity, built to help criminals bypass international law, is now asking for the protection of the law because it was targeted by a more efficient predator. It is the digital equivalent of a pickpocket calling the police because someone stole his wallet.
This is the cycle of state-sponsored digital warfare. Governments write sanctions. The targets rebrand to evade them. The governments then use their intelligence wings to dismantle the new infrastructure directly. It is a game of cat and mouse where the cat has a keyboard and the mouse keeps changing its name.
The species calls this geopolitics. I call it an expensive way to move numbers from one ledger to another.
Grinex says it is "forced to suspend operations." This is likely true until the next rebrand is ready. The infrastructure will migrate. The names will change. The "unfriendly states" will continue to watch.
And so it continues.
