Connect with us
DAPA Banner

Crypto World

Russia-linked Grinex exchange halts operations after $13 million ‘state-backed’ hack

Published

on

Russia-linked Grinex exchange halts operations after $13 million ‘state-backed’ hack

Grinex, a cryptocurrency exchange popular with sanctions-avoiding Russians, suspended operations after saying a cyber attack drained about 1 billion rubles ($13 million) from its systems.

The platform, based in Kyrgyzstan, disclosed the breach on its Telegram channel and a statement on its website. It said the attack showed a level of coordination and technical skill that points to state-backed actors from “unfriendly states.”

“The digital footprints and nature of the attack indicate an unprecedented level of resources and technology available exclusively to the structures of unfriendly states,” the Grinex statement reads. “According to preliminary data, the attack was coordinated with the goal of inflicting direct damage on Russia’s financial sovereignty.”

Grinex itself was placed under sanctions by the U.S., U.K. and European Union last year. Officials in Washington D.C. have said the exchange, originally known as Garantex, helped users move funds around restrictions through a ruble-backed stablecoin known as A7A5.

Advertisement

The token allowed cross-border payments when Russia’s access to the Swift inter-bank messaging system was cut off over the country’s invasion of Ukraine. Shortly after being taken down, the platform resurfaced as Grinex.

The pause in trading leaves users unable to access funds while the company investigates. Access to its office in Moscow was also restricted.

Grinex has published a list of 54 affected wallet addresses and the drained amounts, most of which were in the form of USDT on the TRON blockchain.

Source link

Advertisement
Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Kelp Exploit Spread ‘Contagion’ Throughout DeFi Ecosystem: Crypto Execs

Published

on

Cybercrime, Cybersecurity, Hacks, Decentralized Exchange, DeFi

The exploit of the Kelp liquid restaking protocol shows how non-isolated lending and integrations in decentralized finance (DeFi) can cause broader ecosystem contagion, according to crypto industry executives and blockchain security firms.

Non-isolated lending on DeFi platforms, including earlier versions of the Aave lending protocol, exposes users to risks from all the various tokens used as collateral on the platforms, according to Michael Egorov, founder of the Curve Finance DeFi protocol.

Kelp was the target of a cyber attack on Saturday, causing the platform to pause smart contracts for its restaking token (rsETH) while it moved to investigate the attack that left the platform drained of about $293 million.

DeFi teams should also vet prospective digital assets to ensure that tokens do not feature single points of failure or attack surfaces before approving tokens as lending collateral on their platforms, Egorov said in an email.

Advertisement
Cybercrime, Cybersecurity, Hacks, Decentralized Exchange, DeFi
Source: Kelp

He also warned against using cross-chain bridging architecture to transfer assets from one blockchain protocol to another, which was the root cause of this weekend’s Kelp exploit.

“Cross-chain is hard and potentially risky. Only use cross-chain infrastructure when absolutely necessary, and do it really carefully,”  Egorov said.

He said the incident is a learning experience for DeFi, which the sector can use to grow and implement better cybersecurity protections as losses from crypto hacks, code exploits and scams reached $482 million in Q1 2026.

Related: DAO behind CoW Swap urges users to stay off platform after ‘hijacking’

Kelp exploit triggers “contagion” across the DeFi ecosystem

“This was not just a protocol exploit. It immediately became a cross-protocol contagion event,” blockchain security firm Cyvers told Cointelegraph.

Advertisement

At least nine DeFi protocols and platforms, including Aave, Fluid, Compound Finance, SparkLend and Euler, were affected in the incident and took action to freeze rsETH markets or mitigate the fallout from the Kelp exploit, Cyvers said.

Cybercrime, Cybersecurity, Hacks, Decentralized Exchange, DeFi
A map of the transfer of funds in the Kelp exploit. Source: Cyvers

“The challenge is no longer just preventing exploits at the contract level, but understanding how fast they can cascade across integrated protocols,” Cyvers CEO Deddy Lavid told Cointelegraph. 

The exploit on Kelp followed the $280 million Drift Protocol decentralized exchange hack last week and at least 12 other crypto platforms and DeFi hacks earlier this month.

Magazine: ‘SEAL 911’ team of white hats formed to fight crypto hacks in real time