So-called wrench assaults — the place criminals use violence to coerce victims handy over cryptocurrency — have accelerated this 12 months, in accordance with a brand new report by blockchain safety agency CertiK, which tracks cyber threats and safety incidents within the digital asset business. CertiK verified 52 bodily assaults towards digital asset holders globally within the first half of 2026, up 33% from a 12 months earlier. France, with 33 assaults, accounted for practically two-thirds of publicly reported circumstances.
The report is predicated on verified, publicly reported incidents recognized via legislation enforcement disclosures, court docket paperwork, respected media stories, sufferer testimony and, the place accessible, on-chain proof. As a result of many assaults go unreported, the figures seemingly understate the true scale of the menace.Criminals are attacking extra typically, going after greater targets and reaping bigger payouts. The sum of recorded losses and ransom calls for rose to about $124 million from simply $10.5 million over the identical interval final 12 months, in accordance with the report.
“The pattern means that attackers more and more imagine that bodily coercion can produce outsized returns,” CertiK researchers wrote, including that this has modified “legal economics.”
That is forcing the business to rethink what safety means in crypto. For years, the largest concern was defending blockchains and personal keys from hackers. Now old school operational safety challenges have change into paramount.
Right this moment’s assaults mix on-line intelligence gathering with real-world violence, in accordance with Ronghui Gu, co-founder of CertiK and a pc science professor at Columbia College.“I wouldn’t describe this as only a bodily safety assault anymore,” Gu mentioned in an interview. “It’s actually a mixture of cyberattacks, social engineering and bodily assaults.”
The largest shift has been the rise of house invasions. CertiK verified 20 publicly reported circumstances within the first six months of the 12 months, in contrast with only one within the first half of 2025.
A type of assaults in March concerned a pair within the Paris suburb of Le Chesnay-Rocquencourt. They have been crushed inside their house and compelled to switch roughly $1 million price of Bitcoin. In one other case within the UK, a sufferer was pressured to give up $24 million price of crypto that was finally transformed into the privacy-focused token Monero.
House invasions have changed kidnappings because the fastest-growing type of crypto-related violence. Kidnappings have been as much as 16 within the interval, in contrast with 12 final 12 months.
The bounce in losses additionally factors to criminals turning into extra selective. Attackers are spending extra time stitching collectively blockchain data, leaked buyer databases, social media profiles and public data to construct detailed profiles of potential victims.
“The essential factor is that criminals can now hyperlink crypto holders with private data like house addresses,” Gu mentioned. “As soon as they will hyperlink these datasets collectively, house invasion turns into attainable.”
This rising sophistication has made crypto crime extra distinct from random robberies, with many incidents now involving organized crime.
A single case could contain recruiting a neighborhood crew, utilizing information brokers to produce private data after which transferring stolen funds to cash launderers, Gu mentioned. French investigations have additionally uncovered circumstances involving minors who have been recruited by distant organizers.
These layered operations imply even failed assaults could make financial sense for a lot of concerned, because the bodily danger is handed to the ground-level crews which are thought-about disposable.
France seems because the epicenter of this pattern for a number of causes. The nation has a large crypto ecosystem, whereas additionally dealing with a number of main information breaches, making the placement a very enticing goal.
France additionally does a greater job of recording incidents than different potential hotspots, in accordance with CertiK. French authorities say the true variety of assaults is considerably larger — the inside minister mentioned assaults this 12 months numbered 77 via June — however CertiK has restricted its numbers to publicly reported and independently verifiable circumstances.
Nonetheless, meticulous record-keeping could be a double-edged sword. The report notes that Europe has a number of jurisdictions that hold intensive data. When information breaches happen and are mixed with publicly accessible data, people could be simpler to establish.
One of many largest elements skewing the info could also be that many assaults nonetheless go unreported. “Beneath-reporting stays extreme as a result of victims could worry retaliation, reputational harm, tax publicity, or law-enforcement inaction,” CertiK mentioned within the report.
The nation with the second-most verifiable wrench assaults this 12 months is the US, with simply 4 recognized circumstances within the report. Sweden and the UK every had two.
