Grinex commot after coordinated wallet exploit and TRX laundering

Di-sanksioned exchange Grinex shutdown few days after coordinated wallet exploit wey dem report say drain users funds worth over 1 billion rubles. Grinex tok say the breach na “targeted” and signs show say advanced, state-level resources involved, den dem pause operations, give evidence to law enforcement, and file criminal complaint. Blockchain analytics from TRM Labs expand di story: about 70 related addresses (more than Grinex talk before) dem allegedly swap di stolen assets into TRX via SunSwap, then dem consolidate proceeds into one TRON address wey dey tied to Grinex-linked wallets. TRM also flag TokenSpot as possible related front—two TokenSpot wallets reportedly send funds to same consolidation address, and both platforms commot online around 15 April, show say one actor fit dey involved. Report further tie di incident to Russia-linked sanctions-evasion chain around Garantex → Grinex and di ruble-pegged stablecoin A7A5 (Old Vector). After Garantex shutdown in 2025, Grinex issue A7A5 credits linked to frozen balances, make dem still fit continue activity despite sanctions. OFAC don sanction Grinex and A7A5 issuer before. Estimated financial impact na about 13.74M USDT. TRM also note illicit crypto inflows climb sharp in 2025 with Russia-linked activity, while illicit transactions remain around 1.2% of total on-chain volume. Why e matter for traders: na mainly counterparty and compliance risk. E fit make people dey watch TRX liquidity routes (like SunSwap) more, and fit cause short-term risk-off sentiment around addresses and connected venues, but direct price impact on TRX likely small, since stolen funds appear consolidated not scatter market wide.