So-called wrench assaults — the place criminals use violence to coerce victims at hand over cryptocurrency — have accelerated this yr, in accordance with a brand new report by blockchain safety agency CertiK, which tracks cyber threats and safety incidents within the digital asset trade. CertiK verified 52 bodily assaults in opposition to digital asset holders globally within the first half of 2026, up 33% from a yr earlier. France, with 33 assaults, accounted for almost two-thirds of publicly reported instances.
The report is predicated on verified, publicly reported incidents recognized by way of regulation enforcement disclosures, courtroom paperwork, respected media stories, sufferer testimony and, the place out there, on-chain proof. As a result of many assaults go unreported, the figures doubtless understate the true scale of the risk.Criminals are attacking extra typically, going after greater targets and reaping bigger payouts. The sum of recorded losses and ransom calls for rose to about $124 million from simply $10.5 million over the identical interval final yr, in accordance with the report.
“The development means that attackers more and more consider that bodily coercion can produce outsized returns,” CertiK researchers wrote, including that this has modified “prison economics.”
That is forcing the trade to rethink what safety means in crypto. For years, the largest concern was defending blockchains and personal keys from hackers. Now old style operational safety challenges have change into paramount.
At present’s assaults mix on-line intelligence gathering with real-world violence, in accordance with Ronghui Gu, co-founder of CertiK and a pc science professor at Columbia College.“I wouldn’t describe this as only a bodily safety assault anymore,” Gu mentioned in an interview. “It’s actually a mix of cyberattacks, social engineering and bodily assaults.”
The largest shift has been the rise of house invasions. CertiK verified 20 publicly reported instances within the first six months of the yr, in contrast with only one within the first half of 2025.
A type of assaults in March concerned a pair within the Paris suburb of Le Chesnay-Rocquencourt. They have been overwhelmed inside their house and compelled to switch roughly $1 million value of Bitcoin. In one other case within the UK, a sufferer was pressured to give up $24 million value of crypto that was ultimately transformed into the privacy-focused token Monero.
House invasions have changed kidnappings because the fastest-growing type of crypto-related violence. Kidnappings have been as much as 16 within the interval, in contrast with 12 final yr.
The soar in losses additionally factors to criminals changing into extra selective. Attackers are spending extra time stitching collectively blockchain information, leaked buyer databases, social media profiles and public information to construct detailed profiles of potential victims.
“The necessary factor is that criminals can now hyperlink crypto holders with private info like house addresses,” Gu mentioned. “As soon as they will hyperlink these datasets collectively, house invasion turns into doable.”
This rising sophistication has made crypto crime extra distinct from random robberies, with many incidents now involving organized crime.
A single case might contain recruiting a neighborhood crew, utilizing information brokers to provide private info after which transferring stolen funds to cash launderers, Gu mentioned. French investigations have additionally uncovered instances involving minors who have been recruited by distant organizers.
These layered operations imply even failed assaults could make financial sense for a lot of concerned, because the bodily threat is handed to the ground-level crews which can be thought of disposable.
France seems because the epicenter of this development for a number of causes. The nation has a large crypto ecosystem, whereas additionally going through a number of main information breaches, making the placement a very engaging goal.
France additionally does a greater job of recording incidents than different potential hotspots, in accordance with CertiK. French authorities say the true variety of assaults is considerably increased — the inside minister mentioned assaults this yr numbered 77 by way of June — however CertiK has restricted its numbers to publicly reported and independently verifiable instances.
Nonetheless, meticulous record-keeping is usually a double-edged sword. The report notes that Europe has a number of jurisdictions that hold intensive information. When information breaches happen and are mixed with publicly out there info, people could be simpler to determine.
One of many largest components skewing the info could also be that many assaults nonetheless go unreported. “Beneath-reporting stays extreme as a result of victims might concern retaliation, reputational harm, tax publicity, or law-enforcement inaction,” CertiK mentioned within the report.
The nation with the second-most verifiable wrench assaults this yr is the US, with simply 4 recognized instances within the report. Sweden and the UK every had two.
