Grinex, a US-sanctioned cryptocurrency exchange registered in Kyrgyzstan, said it’s halting operations after experiencing a $13 million heist carried out by “western special services” hackers.
Researchers from TRM, which has confirmed the theft, put the value of stolen assets at $15 million after discovering roughly 70 drained addresses, about 16 more than Grinex reported. Neither TRM nor fellow blockchain research firm Elliptic has said how the attackers slipped past Grinex’s defenses. Grinex said it has been under almost constant attack attempts since incorporating 16 months ago. The latest attacks, it said, targeted Russian users of the exchange.
Damaging “Russia’s financial sovereignty”
“The digital footprints and nature of the attack indicate an unprecedented level of resources and technology available exclusively to the structures of unfriendly states,” Grinex said. “According to preliminary data, the attack was coordinated with the aim of causing direct damage to Russia’s financial sovereignty.”
“Due to the attack, the Grinex exchange is forced to suspend operations,” Grinex continued. “All available information has been transferred to law enforcement agencies. An application has been submitted to the location of the infrastructure to initiate a criminal case.”
TRM said that TokenSpot, a second Kyrgyzstan-based exchange, was also breached. Two of the exchange’s addresses sent funds to the same consolidation address used by the affected Grinex-linked wallets. What’s more, both exchanges became inoperable on Wednesday, suggesting they were hit by the same attacker.
TRM said TokenSpot was a front for Grinex, which the US Treasury Department sanctioned last year. The department’s Office of Foreign Assets Control said that Grinex, in turn, was a rebrand of Garantex, an exchange it had sanctioned in 2022. The department said then that Ganantex had “directly facilitated notorious ransomware actors and other cybercriminals by processing over $100 million in transactions linked to illicit activities since 2019.” Last year’s sanctions against Grinex came a few months after TRM said that the exchange was likely a front for Ganantex.
[ad_2]
Source link
More on us sanctioned currency exchange says 15
Stay tuned for updates on us sanctioned currency exchange says 15 as the story develops. Related: Mobile & Accessories.
Frequently Asked Questions
Grinex, a US-sanctioned cryptocurrency exchange registered in Kyrgyzstan, said it is halting operations after a heist. Grinex reported $13 million stolen, but researchers from TRM confirmed the theft at $15 million across roughly 70 drained addresses, about 16 more than Grinex reported. TRM also said TokenSpot, a second Kyrgyzstan-based exchange, was breached, with two of its addresses sending funds to the same consolidation address as the Grinex-linked wallets; both exchanges became inoperable on Wednesday.
Grinex blamed unfriendly states, saying the digital footprints and nature of the attack indicate resources and technology available exclusively to state structures. According to its preliminary data, the attack was coordinated to cause direct damage to Russia's financial sovereignty, and the latest attacks targeted Russian users of the exchange.
The Treasury Department's Office of Foreign Assets Control sanctioned Grinex last year, saying it was a rebrand of Garantex, an exchange it had sanctioned in 2022. Garantex had directly facilitated notorious ransomware actors and other cybercriminals by processing over $100 million in transactions linked to illicit activities since 2019.
TRM said TokenSpot was a front for Grinex and that both were hit by the same attacker. It also said Grinex had been under almost constant attack attempts since incorporating 16 months ago.
