Russia-friendly exchange says "western special service" behind $15 million cyberattack

Grinex, a US-sanctioned cryptocurrency exchange, halted operations after a $13–15 million cyberattack attributed to "western special services." Blockchain analysts from TRM Labs confirmed the theft across ~70 drained addresses, and identified a second Kyrgyzstan-based exchange (TokenSpot) breached by the same attacker on the same date. Grinex claims the coordinated attack targeted Russian users and aimed to damage Russia's financial sovereignty.