Crypto Wrench Attacks Jump 33% in First Half, CertiK Says

The cryptocurrency industry has long faced the risk of breaches targeting exchanges, DeFi protocols and wallets, with security firm CertiK tracking losses from onchain attacks. While the decline in total losses may appear encouraging, it does not mean defenses have improved in tandem. Attack methods and the damage caused by individual incidents remain key measures of the ecosystem’s security.

Crypto hacks caused $1.32 billion in losses from January through June 2026, down about 46.8% from the same period in 2025, according to CertiK. The firm warned, however, that the decline could create a false impression of improved security. Attackers are becoming increasingly sophisticated and destructive, while North Korean hackers remain a major threat.

Crypto “wrench attacks” involve kidnapping, detention or threats of violence to force holders to surrender private keys, transfer assets or pay ransom. CertiK said such cases are now highly concentrated in Europe, exposing wealthy crypto holders to more direct risks to their personal safety and assets.

Crypto wrench attacks caused at least $101 million in losses worldwide from January through April 2026, with Europe emerging as the main affected region, according to CertiK’s latest report. Although the number of attacks fell from the same period in 2025, losses doubled, indicating that individual cases have grown larger and risks have become highly concentrated.

Blockchain security company CertiK said the cryptocurrency industry faces AI-enhanced social engineering and attacks exploiting protocol vulnerabilities. North Korean hackers are also using generative AI to fabricate identities and make scams more convincing, exposing exchanges, DeFi protocols and investors' assets to increasingly complex risks across platforms.

A CertiK report showed that cryptocurrency hacks have caused more than $600 million in losses so far in 2026. It predicted that deepfakes, phishing and software supply-chain compromises will drive the year's biggest attacks. The company urged investors to improve their awareness of offline storage, multifactor authentication and transaction verification.