Category: Policy & Regulation

Grinex has halted operations after a theft of more than 1 billion rubles, or roughly $13.7 million, hit the sanctions-linked exchange, with blockchain analysts tracing the stolen funds through TRON-based swaps that appear designed to avoid a stablecoin freeze.

What changed

• Grinex said it suspended trading after funds were drained from 54 exchange-linked addresses and said a criminal complaint had been filed.
• TRM Labs said it identified about 70 addresses tied to the incident, including roughly 16 beyond the exchange’s public disclosure.
• TRM said the stolen funds were largely USDT on TRON, then swapped into TRX and consolidated into a single address holding about 45.9 million TRX, worth close to $15 million at the time of its analysis.
• Elliptic said some of the stolen funds were converted into TRX or ETH, which reduced the risk of the USDT being frozen by Tether.
• TRM also linked two TokenSpot addresses to the same consolidation address, suggesting the same operation may have touched another Kyrgyzstan-based exchange connected to the Grinex and Garantex ecosystem.

Why it matters

This is not just another exchange-hack headline. Grinex has been widely treated as a successor to Garantex, so the incident lands in a part of the market already associated with sanctions-evasion and shadow-finance flows. It also shows how quickly stolen stablecoins can be rerouted through decentralized rails before an issuer freeze has time to land.

Before you act

• If you interact with thinly disclosed exchanges or brokers, verify where their liquidity, wallet infrastructure and settlement rails actually sit.
• Do not treat the exchange’s claim about foreign intelligence involvement as established fact without independent proof.
• Watch for follow-up sanctions, wallet labeling, or exchange-risk notices tied to Grinex, TokenSpot, TRON addresses involved in the incident, or successor entities that try to absorb displaced flow.

Risk/Friction: High

Bottom line

The practical takeaway is that this breach hit a politically sensitive exchange network and highlighted how stolen crypto can be shifted out of freezeable stablecoins fast, making infrastructure risk just as important as headline loss figures.

Source

Source: Cointelegraph

Supporting sources: TRM Labs; Chainalysis; Elliptic

Source type: Secondary

Publish status: CONFIRMED

Timestamp (UTC): 2026-06-01T04:21:00Z

Rewritten in our own words for readability.

The U.K. has sanctioned Xinbi, a Chinese-language crypto guarantee marketplace that officials say helps scam-center operators move money and obtain crypto-based services, in a move designed to cut the platform off from the legitimate digital-asset ecosystem.

What changed

• The U.K. Foreign, Commonwealth & Development Office said Xinbi provides crypto-based services, scam-enabling tools and other illicit support to bad actors tied to scam-center operations across Southeast Asia.
• British authorities said the sanctions are meant to isolate Xinbi from the legitimate crypto ecosystem and disrupt its ability to send and receive cryptocurrency transactions.
• Under the sanctions, any U.K.-linked assets connected to Xinbi are subject to a freeze, and U.K.-based businesses and individuals are barred from providing goods, services, loans or investments to the platform.
• Chainalysis estimated Xinbi processed more than $19.9 billion between 2021 and 2025 and described it as deeply interconnected with other illicit services.
• The sanctions also hit individuals allegedly linked to the wider Prince Group scam infrastructure network.

Why this matters

This is more than a generic sanctions headline. It shows regulators are starting to target the marketplace layer that helps industrial-scale fraud networks operate, not just individual wallets after the fact. For crypto firms, that raises the compliance stakes around who they indirectly service and which rails they allow to stay connected.

Before you act

• If you run a crypto business, review whether any counterparties, payment flows or service relationships touch marketplaces or brokers linked to scam infrastructure.
• Do not assume a platform is safe just because it presents itself as a neutral marketplace or escrow-style service.
• Watch for follow-up enforcement or analytics reporting that identifies more specific onchain links, facilitators or off-ramp channels tied to Xinbi.

Risk/Friction: High

Bottom line

The practical takeaway is that regulators are moving upstream toward the crypto marketplaces that sustain scam ecosystems, which means compliance exposure can increasingly come from the infrastructure around a transaction, not just the final wallet address.

Source

Source: Cointelegraph

Source type: Secondary

Publish status: CONFIRMED

Timestamp (UTC): 2026-05-31T05:58:00Z

Rewritten in our own words for readability.