Seriously though, I'd just contact Brian Krebs and go from there.
Negotiate your own anonymity with him BEFORE you provide any actual info (this goes for all reporters BTW).
Another option is to drop a write-up in The NY Times or Washington Post Secure Drop TOR service. They both have serious info security reporters.
No guarantee any of these options will pick up the story, of course.
[You do you, but "letting people know a crypto company in Russia(?) is a bit shady" is not at the same level as walking past a person in trouble and ignoring them. The risks to your person and life of 'hacking' a multi-million dollar financial company, accross national borders, into a country in an active war and sabre rattling to the rest of the world, have got to be worth some serious consideration and not just a hurried blog post written in a couple of days].