Three US Men Charged Over Alleged Violent Crypto ‘Wrench Attack’ Robbery
A “wrench attack” is a physical crime in which perpetrators use kidnapping, beatings or death threats to force cryptocurrency holders to surrender their wallet seed phrases or private keys. Such targeted attacks have increased globally since 2025 because blockchain transfers are difficult to reverse and assets can be moved quickly, underscoring the personal-security risks associated with self-custody.
The US Justice Department recently charged three Tennessee men with traveling across state lines to California, posing as delivery workers to enter a home and using violence and threats to force the victim to surrender a cryptocurrency seed phrase. Prosecutors said the three stole about $6.5 million in crypto assets. The case has been classified as an interstate “wrench attack” targeting a cryptocurrency holder.
All Coverage
2 original reportsThe Backstory
The history behind this eventViolent Crypto Thefts Top $30 Million in First Half of 2026
Crypto “wrench attacks” use kidnapping, assault or other physical threats to force holders to surrender private keys or transfer digital assets. The tactic exploits a defining feature of cryptocurrency: blockchain transactions are generally irreversible, leaving victims with limited options once funds are sent. Criminal groups are also targeting relatives and other people close to wealthy holders, turning personal security into a growing risk alongside hacking and online fraud.
More than $30 million in cryptocurrency was stolen through violent attacks in the first half of 2026, according to a report from blockchain analytics firm Chainalysis, putting the year on pace for a record. The cases increasingly involved home invasions and threats against victims’ friends or family members. France recorded the largest number of publicly reported incidents through June 2026, emerging as the leading hotspot for such attacks.
Suspects Plead Guilty in Armed Theft of More Than $8 Million in Crypto From Minnesota Family
Cryptocurrency can be transferred rapidly across borders, and transactions are difficult to reverse once recorded on-chain, making large holders physical targets for so-called “$5 wrench attacks.” CertiK data showed that such attacks and kidnappings rose 75% in 2025. The theft of more than $8 million in this case underscores that cybersecurity measures cannot replace personal security.
On September 19, 2025, Texas brothers Isiah Garcia and Raymond Garcia broke into a home in Grant, Minnesota, tied up the family at gunpoint for more than eight hours and forced the homeowner to transfer more than $8 million in cryptocurrency. Both pleaded guilty in the U.S. District Court for the District of Minnesota on June 18, 2026, and agreed to pay more than $8 million in restitution. Each faces up to 20 years in prison, and sentencing has not yet been scheduled.
France Charges 88 People Over 12 Alleged Crypto Wrench Attacks
So-called wrench attacks use violence, including home invasions, kidnappings and extortion, to force cryptocurrency holders to surrender wallet credentials or transfer assets. Because blockchain wealth is visible and personal information can be readily collected, victims' relatives may also be targeted. The involvement of France's National Prosecutor's Office Against Organized Crime (PNACO) indicates that authorities regard the cases as part of an organized criminal network.
PNACO head Vanessa Perrée said on April 24, 2026, that specialist investigating judges at the Paris Judicial Court were examining 12 cases. A total of 88 people had been charged, including 10 minors, with 75 held in pretrial detention. After consolidating some cases, authorities found that several people were repeatedly implicated. PNACO recorded 18 similar incidents in 2024, 67 in 2025 and 47 from the start of 2026 through April 24. It did not disclose the total amount involved.
Subscribe to Mark Radar Weekly
Every Friday, the week's strongest signals in your inbox. Unsubscribe anytime.
If you search news on Google, you can set Mark Radar as a preferred source—our coverage will show up more often in your results. Set as preferred source on Google →