TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Infosecurity Magazine

Crypto Exchange Grinex Blames Western Spies for $13m Theft

2026-04-20 · Read original ↗

ATT&CK techniques detected

3 predictions
T1657Financial Theft
91%
“restrict the transfer of cryptocurrency outside the cis : the exchange was placed on sanctions lists, crypto wallets were deliberately targeted, and transactions were blocked. today, attempts to destabilize the domestic financial sector have reached a new level – the direct theft…”
T1657Financial Theft
44%
“exfiltrated, they were actively moved by leveraging a popular tron - based decentralized exchange ( dex ) to swap the stablecoins into tron ( trx ), the native token of the tron blockchain. interestingly, this specific dex was previously heavily leveraged by garantex – grinex ’ s…”
T1048Exfiltration Over Alternative Protocol
35%
“exfiltrated, they were actively moved by leveraging a popular tron - based decentralized exchange ( dex ) to swap the stablecoins into tron ( trx ), the native token of the tron blockchain. interestingly, this specific dex was previously heavily leveraged by garantex – grinex ’ s…”

Summary

Russian crypto-exchange Grinex claims Western intelligence agencies were behind a $13m heist