Stolen $13.7M from Grinex moves to major exchanges, raising inside job fears

Funds stolen from the Russian cryptocurrency exchange Grinex in a large-scale cyberattack in April, totaling over $13.7 million, have begun to move. According to Chainalysis data, the funds appear to be moving through mixers and cross-chain bridges to major exchanges for withdrawal. Chainalysis noted it is unclear whether the activity is the work of the original hackers or an insider laundering the funds. Grinex was launched just two weeks after the sanctioned exchange Garantex shut down in March 2025 and is suspected of being a rebranded exchange using the same team and infrastructure.