Major Hack Hits Grinex: Kyrgyz Crypto Exchange Tied to Russian Sanctions Evasion Loses $13 Million and Suspends Operations

Kyrgyz Crypto Exchange Grinex Loses $13 Million in Major Hack Amid Sanctions Evasion Allegations

By Eurasianet – Apr 22, 2026, 11:00 AM CDT

In a shocking turn of events, Grinex, a Kyrgyz-registered cryptocurrency exchange linked to Russian sanctions evasion, has announced it lost over $13 million in a significant hack, prompting the suspension of its operations. The incident raises serious questions about the security of platforms facilitating transactions aimed at bypassing international financial restrictions.

On April 16, Grinex revealed via its Telegram channel that the cyberattack resulted in the theft of more than 1 billion rubles from users’ crypto wallets. In a statement, the exchange claimed that the hack was orchestrated by foreign special services intent on disrupting Russian efforts to evade sanctions and procure essential goods and technologies. “The digital traces and the nature of the attack indicate an unprecedented level of resources and technologies available exclusively to structures of unfriendly states,” Grinex asserted.

Launched in mid-2025, Grinex emerged after the closure of another crypto exchange, Garantex, which was shut down following EU sanctions and a U.S. Justice Department investigation. Grinex quickly became a hub for transactions using A7A5, a ruble-pegged cryptocurrency that has gained notoriety as a preferred method for Russian entities seeking to navigate around international sanctions. According to crypto analysis firm Elliptic, A7A5 facilitated over $1 billion in daily transactions, primarily through Grinex.

The growing accessibility and liquidity of A7A5 have posed significant challenges to global sanctions efforts, providing Russian entities with a means to conduct cross-border transfers outside traditional banking systems. In response to its role in enabling sanctions evasion, the U.S. Treasury Department sanctioned Grinex last August, labeling it as a facilitator for cybercriminal activities.

Despite these allegations, Kyrgyz government officials have consistently denied claims that their country is aiding Russian sanctions evasion. The fallout from the hack raises further concerns about the intersection of cryptocurrency and international finance, as authorities grapple with the implications of digital currencies in circumventing sanctions.

As the dust settles on this major breach, the future of Grinex and its role in the crypto landscape remains uncertain, with potential repercussions for users and the broader financial ecosystem.