Crypto Wrench Attacks Hit 52 as Exposure Surges to $124 Million

A “wrench attack” uses kidnapping, home invasion or physical coercion to force a cryptocurrency holder to surrender wallet access or transfer assets. The tactic matters because it sidesteps digital safeguards designed to prevent hacking, shifting the weak point from software to people and their families. Blockchain security firm CertiK calls such attacks an established threat vector and says public links among a holder’s identity, residence, routine and crypto wealth can heighten exposure.

In a report published July 22, 2026, CertiK said 52 verified wrench attacks were recorded in the first half, even as the pace slowed in the second quarter. Recorded financial exposure, including ransom demands and stolen funds, surged more than 1,000% from a year earlier to $124 million from $10.5 million. Europe accounted for 39 incidents and France 33, while home invasions jumped to 20 from one in the first half of 2025. CertiK urged holders to limit disclosure of identities, locations and routines.