Violent Crypto Attacks Surge, On Pace for Worst Year on Record
Physical assaults targeting cryptocurrency holders are on track for their most severe year to date, with over $30 million pilfered in the first half of 2026, according to a new report from blockchain analytics firm Chainalysis.
The report, released Thursday, documented 46 violent crypto-related incidents through late June, estimating that victims collectively lost more than $30 million. Chainalysis noted a significant increase in these attacks in recent years, describing them as “wrench attacks” in security circles, which encompass home invasions, kidnappings, and hostage situations. Criminals, the firm stated, have recognized crypto holders as lucrative targets due to the instantly and irreversibly transferable nature of their digital wealth.
A “wrench attack” specifically refers to the use of threats or physical violence to coerce victims into relinquishing their cryptocurrency. While kidnappings remain the most prevalent form of attack, home invasions have seen a notable rise, accounting for 37% of documented incidents, up from 26% in 2023. Chainalysis also observed a growing trend of attackers targeting relatives and acquaintances to exert pressure on victims.
“Home invasions allow criminals to confront victims in a controlled environment where they can compel a transfer of funds,” Chainalysis explained. “Kidnappings, by contrast, are much more difficult to execute. Attackers must expend considerable time and resources planning logistics; and the extended periods spent with victims leaves the attacker exposed for longer.”
France has emerged as a primary hub for wrench attacks, recording 30 incidents by mid-2026, more than any other nation. Chainalysis suggests this surge may be linked to an alleged breach of tax records that exposed information about high-net-worth crypto holders.
The report also highlighted disparities in how attackers manage stolen funds. Some, exhibiting a rudimentary understanding of cryptocurrency, move stolen assets directly to centralized exchanges without attempting to conceal their tracks. Others, however, employ more sophisticated methods to obscure the flow of illicit funds.
“Mid-tier attackers demonstrate greater familiarity with crypto infrastructure,” Chainalysis wrote. “They may use decentralized exchanges, bridges, MEV bots, and other DeFi tools to swap and move assets across chains. They understand that centralized exchanges represent chokepoints with sophisticated compliance programs and user KYC, and attempt to avoid or delay interaction with them.”
This analysis arrives as violent attacks against crypto holders continue their upward trajectory. In February, CertiK reported a 75% increase in wrench attacks in 2025, reaching a record 72 incidents, with France identified as the epicenter. In April, French authorities charged 88 suspects, including over a dozen minors, across 12 investigations as part of a broader crackdown on organized gangs orchestrating these violent crypto attacks.
Further underscoring the severity of the issue, French authorities indicted a man in June accused of participating in a crypto wrench attack after allegedly impersonating a police officer. In July, CertiK reported that financial losses from wrench attacks had reached $124 million in the first half of 2026. This week, five men were convicted in London for imprisoning and torturing two French crypto millionaires as part of an extortion scheme.
Beyond the wave of wrench attacks in Europe, Bitcoin ransom demands have also garnered national attention in the U.S. Earlier this year, ransom notes demanding Bitcoin surfaced during the investigation into the kidnapping of Nancy Guthrie, mother of “Today” show host Savannah Guthrie.
Leave a Reply