IRL crypto threats: Physical “wrench attacks” have led to over $100 million in losses since January alone

A notable development has hit the crypto markets. Crypto investors have lost more than $100 million to physical extortion in the first four months of 2026, according to blockchain security firm CertiK, as criminal groups increasingly target the people behind digital wallets rather than the technology securing them. The attacks, known in the industry as “wrench attacks,” use kidnapping, assault, threats, or other forms of physical coercion to force victims to transfer crypto, unlock accounts, or surrender access to private keys. The tactic has become a growing concern for an industry that has spent years building defenses against phishing, malware, smart-contract exploits, and exchange breaches.

CertiK said verified global incidents rose 41% to 34 from the same period last year. If the current pace continues, the blockchain security firm estimates the full-year count could reach about 130 incidents, with losses running into the several hundred million dollar range. Crypto Wrench Attack (Source: CertiK) This projection means that this year's attacks are on track to exceed those of 2025, which researchers described as the most active year on record for crypto-related physical assaults.

Market Dynamics

However, security researchers and law enforcement universally acknowledge that these figures represent a fraction of the reality. The inherently traumatic nature of the crimes, combined with the victim's fear of retaliation, results in chronic underreporting. That makes wrench attacks harder to track than on-chain exploits, where stolen funds can often be traced across wallets and exchanges in real time.

France becomes the center of Europe’s crypto violence Europe has become the main center of the threat this year, accounting for 82% of CertiK’s verified cases in the first four months of 2026. Reported incidents in the US and Asia have declined over the same period, leaving France as the clearest concentration of crypto-related physical crime. French authorities have acknowledged the scale of the problem.

During Paris Blockchain Week this year, the Ministry of the Interior reportedly identified 41 incidents involving physical coercion tied to digital assets since January, a rate of roughly one attack every two and a half days. Crypto Wrench Attacks by Country (Source: CertiK) France’s rising exposure could be linked to a mix of industry concentration, public visibility, and data leakage. The country is home to major crypto companies and executives, including firms such as Ledger and Paymium, creating a visible network of founders, developers, investors, and early adopters.

Market Impact

Public events, meetups, and social media activity can make it easier for criminal groups to identify people they believe have access to digital assets. The risk has been compounded by breaches involving sensitive personal information. CertiK cited the case of Ghalia C.

, a tax official at France’s General Directorate of Public Finances, who was accused of using government tax software to search for profiles of crypto-asset holders before allegedly selling the information to criminal networks. That case has become a reference point for a broader concern, as attackers may no longer need to rely only on social media displays of wealth. Leaked tax records, customer files, home addresses, and accounting data can help turn a blockchain user into a physical target.

Criminal groups follow the path to liquidity The appeal of wrench attacks lies in their directness. A criminal group does not need to defeat encryption, break a hardware wallet, or exploit a smart contract if it can force a victim to approve a transfer. That calculation has made crypto attractive to groups already willing to use violence.

Crypto markets are watching this development closely as investors weigh its potential impact on prices.