Skip to content

Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed

Global Financial Service Disruptions

Grinex

crypto exchange · KG · Global · Grinex

Confirmed cyberStatus: unknownTier 1Severity 3 of 5Evidence confidence: highAnalyst-verified

Sanctioned Kyrgyzstan-registered exchange Grinex, seen as Garantex's successor, suspended all operations on 16 to 17 Apr 2026 after about 13.7M USD was drained, blaming Western intelligence.

First disruption
Apr 15 12:00 UTC
First public signal
Apr 16 (Grinex statement announcing suspension)
Acknowledged
Apr 16
Restored
not yet
Duration
not established
DFX first recorded
Nov 5 14:58 UTC

What was restricted

allScope: institution wide

All operations suspended; customer funds drained to external TRON and Ethereum wallets.

Financial impact: About 13.74M USD (some reports up to 15M USD).

Cause, kept in separate layers

What the institution said
Cyberattack attributed by Grinex to Western intelligence services
DFX classification
Confirmed cyber (cyber: confirmed)
Analytical hypothesis (not established)
Attribution to state actors is the exchange's claim and unverified; TRM Labs also found a second hack at related TokenSpot.
Conflicting reports
Suspension date 16 or 17 Apr; loss 13M to 15M USD.

Dependencies

A dependency is a documented relationship. It is not evidence that the provider was compromised.

  • Downstream: A7A5 ruble stablecoin users: one outlet reported A7A5 ceasing with shutdown (plausible)

Evidence