Blockchain & Cryptocurrency,
Cryptocurrency Fraud,
Fraud Management & Cybercrime
Cryptocurrency Exchange Traded A7A5 Token
The recent collapse of a cryptocurrency platform has not deterred Russian sanctions busters, who previously utilized the exchange for billions of dollars’ worth of transactions. Central to its operations was a ruble-pegged stablecoin, which had garnered significant attention in the crypto market.
Grinex, which was registered in Kyrgyzstan—a Russia-aligned nation—suspended its operations late last month following an alleged cyberattack. The operators of the exchange claimed in a message disseminated in the Russian language that foreign special services were responsible for the hack, leading to the compromise of more than 1 billion rubles, approximately $13 million, in user funds.
This incident marked the second closure of a cryptocurrency exchange associated with Russia due to international pressures and sanctions imposed by the United States, United Kingdom, and European Union. Notably, Garantex was the first platform to cease operations, being taken down by an international police operation in March 2025. Grinex started its operations shortly thereafter, heavily promoted via Garantex’s Telegram channels, viewed as a successor to the now-defunct platform.
Experts in cryptocurrency and blockchain transactions suggest that, despite the closure of Grinex, the transactions fueling Russia’s shadow economy and military endeavors are likely to continue in new, less visible domains. Kaitlin Martin, a senior intelligence analyst at Chainalysis, expressed that the ecosystem would likely evolve into a more fractured state, complicating efforts to target and regulate it effectively.
The precise reasons behind Grinex’s closure remain uncertain. The operators noted that the hacked funds were shifted into non-freezable tokens—a peculiar decision if the hacker was working on behalf of law enforcement or intelligence services. A report by Incrypted, which provided global ledger data, indicated that Grinex had facilitated over $16 billion in transactions since March 2025. Out of this amount, an astounding $9.25 billion transacted after the U.S. Department of Treasury’s Office of Foreign Assets Control (OFAC) imposed sanctions in August of the same year.
A major factor contributing to Grinex’s popularity was the A7A5 ruble-pegged stablecoin, which has been instrumental in nearly $120 billion worth of transactions. According to Chainalysis, the trading volume for A7A5 predominantly occurred on weekdays, suggesting its role as a covert settlement layer for the Russian government and businesses engaging in international financial transactions.
Martin posited that A7A5 is unlikely to have utility beyond the Russian ecosystem, even though token holders can exchange it for stablecoins. Such exchanges often transpire through intermediary wallets on mainstream exchanges, sometimes using mule accounts. An Instant Swapper service allows for the conversion of A7A5 into widely-accepted stablecoins pegged to the U.S. dollar, all while bypassing stringent “know your customer” protocols.
The nomenclature of A7A5 traces back to a Russian entity, A7, which specializes in providing methods for evading international sanctions. According to U.S. Treasury officials, A7 is associated with the sanctioned Moldovan oligarch Ilan Shor and the sanctioned Russian bank Promsvyazbank, indicating deeply rooted connections within the financial underworld.
Ari Redbord, the global head of policy at TRM Labs, anticipated that a new iteration of the Grinex-Garantex model is already in the pipeline, suggesting that future operators might try to obscure their lineage more adeptly or potentially rebrand under the same network to continue their operations.
While the takedown of Grinex will likely introduce significant obstacles to the evasion of sanctions by Russian entities, it is noteworthy that the exchange’s Telegram channels remain active and that Kyrgyzstan’s welcoming status for Russian cryptocurrency platforms remains unchanged. Meanwhile, operators behind A7A5 appear to be thriving; they were notably a sponsor at Token2049, dubbed “the world’s largest crypto event,” held annually in Singapore. Furthermore, an investigation by the Russian news outlet Proyekt revealed that A7 accounts for about 15% of all cross-border financial transactions in Russia, indicating its substantial role in the ongoing evasion of international financial regulations.