Crypto stolen in the alleged $13.7 million hack of Grinex are moving. We’re tracking stolen funds as they flow through mixers and cross-chain bridges, with cash-out points at a mainstream exchange. This complicates recovery for the exchange’s users. But is it a hacker or an insider laundering the funds? Two months ago, Grinex (successor to Russian exchange Garantex) claimed it was hacked by “foreign intelligence services.” But on-chain evidence pointed to a possible inside job. For one, the alleged hacker swapped exfiltrated stablecoins for Tron (TRX) on a decentralized exchange that Garantex once favored. Most of the funds are still being held as balances on private wallets. Grinex claims on its website that it will compensate its customers for stolen assets — will these users get their funds back, or have they fallen victim to an exit scam?