Wu learned that, according to Chainalysis monitoring, the $13.7 million stolen from Grinex, the successor platform of Russian exchange Garantex, is being moved through mixers and cross-chain bridges, and being withdrawn on mainstream exchanges. Although the official claim is that this case was carried out by foreign intelligence agencies, on-chain evidence shows that the hackers exchanged stablecoins for TRX on DEXes favored by Garantex, highly suggesting insider money laundering. Currently, most of the funds remain in private wallets. Although the officials have promised compensation, users should remain vigilant against exit scam risks.