Grinex Collapse Won't Dent Russian Sanctions Busting

Blockchain & Cryptocurrency , Cryptocurrency Fraud , Fraud Management & Cybercrime Grinex Collapse Won't Dent Russian Sanctions Busting Cryptocurrency Exchange Traded A7A5 Token Andrew Martinez • May 4, 2026     Share Post Share Credit Eligible Get Permission Image: Shutterstock Russian sanctions busters won't be too fazed by the collapse of a cryptocurrency platform that facilitated billions of dollars' worth of transactions and whose main attraction was a ruble-pegged stablecoin. See Also: OnDemand | NSM-8 Deadline July 2022:Keys for Quantum-Resistant Algorithms Implementation Grinex, registered in Russia-allied Kyrgyzstan, suspended operations late last month after an alleged cyberattack. Exchange operators in a Russian language message attributed the hack to "foreign special services" and said more than 1 billion rubles - around $13 million - of users' funds were compromised in the incident. The platform's apparently abrupt closure marks the second Russian, but nominally Kyrgyzstani, cryptocurrency exchange to recently cease operations under international pressure that - if not outright hacking - at least included sanctions levied by the United States, United Kingdom and European Union. The other platform was Garantex, of which Grinex was widely seen as a successor. An international police operation took down Garantex in March 2025. Grinex started operations almost immediately afterward and received promotion on Garantex Telegram accounts (see: US Feds Take Down Garantex, Indict Operators). Experts say transactions fueling Russia's shadow economy and its war machine will persist in new arenas. "The ecosystem is just going to continue to fracture more, which honestly makes it harder to target," said Kaitlin Martin, a senior intelligence analyst at blockchain analysis platform Chainalysis. What exactly caused the Grinex closure is unknown. Platform operators identified the trail of its compromised funds, which the intruder swapped into non-freezable tokens - an unusual move if the hacker were law enforcement or from intelligence services, experts said. According to global ledger data reported by Incrypted, Grinex facilitated more than $16 billion in transactions since March 2025, of which $9.25 billion came after the U.S. Department of Treasury's Office of Foreign Assets Control levied sanctions in August that year. Key to Grinex's popularity was the A7A5 ruble-pegged stablecoin, which has facilitated nearly $120 billion in transactions, according to Chainalysis. A7A5 trading volume mostly occurs during weekdays, suggesting it is largely an illicit settlement layer for the Russian government and businesses to settle international accounts. Martin said she doesn't believe A7A5 is used outside of a Russian ecosystem, although token holders can swap it for stablecoins. Those swaps can occur through layered intermediary wallets on mainstream exchanges, sometimes in mule accounts. An A7A5 Instant Swapper service also converts the token into mainstream stablecoins pegged to the U.S. dollar, with no know your customer protocols. A7A5 name was created an eponymous Russian firm A7, which provides methods for sanctions evasion, according to Treasury. The business is owned by sanctioned Moldovan oligarch Ilan Shor and sanctioned Russian bank Promsvyazbank. The next iteration of Garantex-Grinex is likely already in motion, said Ari Redbord, global head of policy at TRM Labs. "The harder question is whether the next operator tries to obscure the lineage more aggressively or simply rebrands again under the same network," he said. The takedown will add "significant friction" to the Russians sanctions evasion, but Grinex's Telegram channels are intact and nothing has changed Kyrgyzstan's status as a host for Russian cryptocurrency platforms, Redbord noted. A7A5 operators are also apparently flourishing. They were a sponsor last year of Token2049, "the world's largest crypto event," an annual conference held in Singapore. An April investigation by Russian news outlet Proyekt concluded that A7 accounts for about 15% of all of Russia's cross-border financial transactions.