Crypto Wrench Attacks Target $124 Million as Cases Rise to 52
So-called crypto “wrench attacks” use home invasions, kidnappings or other physical coercion to force holders to surrender private keys or transfer digital assets. The threat has become a growing concern for the industry because blockchain transactions are generally irreversible, while social-media posts and public records can expose a holder’s identity, wealth, routines and location to criminals seeking direct access to funds.
CertiK said the tally of physical attacks targeting cryptocurrency holders climbed to 52 in the first half of 2026, with home invasions becoming the most common method. Attackers targeted $124 million worth of assets over the six-month period, a 12-fold increase from the comparable baseline. The blockchain security firm advised holders to limit public disclosures of personal identities, daily schedules and geolocation data to reduce the risk of robbery.
All Coverage
3 original reportsThe Backstory
The history behind this eventViolent Crypto Thefts Top $30 Million in First Half of 2026
Crypto “wrench attacks” use kidnapping, assault or other physical threats to force holders to surrender private keys or transfer digital assets. The tactic exploits a defining feature of cryptocurrency: blockchain transactions are generally irreversible, leaving victims with limited options once funds are sent. Criminal groups are also targeting relatives and other people close to wealthy holders, turning personal security into a growing risk alongside hacking and online fraud.
More than $30 million in cryptocurrency was stolen through violent attacks in the first half of 2026, according to a report from blockchain analytics firm Chainalysis, putting the year on pace for a record. The cases increasingly involved home invasions and threats against victims’ friends or family members. France recorded the largest number of publicly reported incidents through June 2026, emerging as the leading hotspot for such attacks.
France Leads World in Physical Crypto Attacks, Accounting for 70% of Cases
A “wrench attack” involves criminals using kidnapping, assault or coercion to force cryptocurrency holders to surrender private keys or transfer digital assets. France has drawn attention because of its high concentration of such cases. After Ledger’s 2020 customer data breach, centrally stored personal information including names, telephone numbers and home addresses may have been used to target victims, highlighting the physical security risks associated with KYC requirements.
A recent report said about 70% of physical attacks involving cryptocurrency worldwide occur in France. The country has recorded 41 related kidnappings so far in 2026. Experts say past customer data breaches at companies such as Ledger have made it easier for criminal groups to identify cryptocurrency holders and their homes. The cases show that the centralized exposure of identity data collected under regulatory requirements can extend digital-asset risks to personal safety.
Subscribe to Mark Radar Weekly
Every Friday, the week's strongest signals in your inbox. Unsubscribe anytime.
If you search news on Google, you can set Mark Radar as a preferred source—our coverage will show up more often in your results. Set as preferred source on Google →