← Back to Financial

Kyrgyzstan Crypto Exchange Grinex Halts Operations Following $13.7 Million Theft

FinancialAI-Generated & Algorithmically Scored·

AI-generated from multiple sources. Verify before acting on this reporting.

BISHKEK, Kyrgyzstan (AP) — Grinex, a cryptocurrency exchange based in Kyrgyzstan, suspended all operations on Wednesday after a cyberattack drained $13.7 million from user wallets, primarily belonging to Russian nationals. The exchange attributed the breach to Western intelligence agencies seeking to undermine Russia's financial sovereignty.

The incident occurred late Tuesday local time, with the exchange announcing the suspension of services shortly after midnight on Wednesday. Grinex stated that the attackers exploited vulnerabilities in the platform's security infrastructure to access cold storage wallets. The stolen funds were transferred across multiple blockchain networks, complicating recovery efforts.

In a statement released on Wednesday, Grinex executives identified the perpetrators as actors linked to Western intelligence services. The exchange claimed the attack was part of a broader campaign to destabilize Russia's digital economy and restrict its access to global financial systems. No specific agency was named, but the exchange cited patterns of operation consistent with state-sponsored cyber campaigns.

Russian officials have not publicly commented on the incident, though the theft has drawn attention from Moscow's financial regulators. The Central Bank of Russia has begun an internal review of the situation, examining the implications for Russian citizens holding assets on foreign exchanges. Analysts note that the attack highlights vulnerabilities in cross-border cryptocurrency platforms serving Russian users.

Grinex has not provided details on the technical methods used in the breach. The exchange's website and mobile application remain offline as security teams assess the damage. Customer support channels are inactive, and the exchange has not issued a timeline for resuming operations.

The $13.7 million loss represents a significant portion of Grinex's reported reserves. The exchange, which has operated in Kyrgyzstan for over three years, has previously faced scrutiny over its regulatory compliance. Kyrgyzstan's financial authorities have not yet commented on the incident or indicated whether they will launch an investigation.

Cybersecurity experts caution that attribution of cyberattacks remains complex. While Grinex has pointed to Western intelligence agencies, independent analysts have not confirmed the claim. The exchange's statement does not include technical evidence or forensic data to support the allegation.

The incident has raised concerns among cryptocurrency users in Russia and neighboring countries. Several Russian financial news outlets have reported on the breach, with some questioning the security practices of offshore exchanges catering to Russian clients. The attack comes amid heightened tensions between Russia and Western nations over economic sanctions and digital asset regulations.

Grinex has not announced plans to compensate affected users. The exchange's leadership has urged patience as they work with international cybersecurity firms to trace the stolen funds. Recovery of cryptocurrency assets remains uncertain, as blockchain transactions are typically irreversible.

As of Wednesday evening, no arrests or legal actions have been announced in connection with the breach. The situation remains fluid, with Grinex expected to provide further updates as the investigation progresses. The impact on Kyrgyzstan's reputation as a cryptocurrency hub remains to be seen.