Physical Crypto Extortion Soars: Over $100M Lost in Wrench Attacks in 2026

Crypto Investors Lose Over $100 Million to Physical Extortion in 2026

Crypto investors have lost more than $100 million to physical extortion in the first four months of 2026, according to blockchain security firm CertiK. Criminal groups are shifting focus from digital vulnerabilities to targeting the people behind digital wallets.

The attacks, known as "wrench attacks", involve kidnapping, assault, threats, or other forms of physical coercion to force victims to transfer cryptocurrency, unlock accounts, or surrender access to private keys. This tactic has become a growing concern for an industry that has long prioritized defenses against phishing, malware, smart-contract exploits, and exchange breaches.

Global Incidents Rise 41% in Early 2026

CertiK reported that verified global incidents rose 41% to 34 in the first four months of 2026 compared to the same period last year. If the current pace continues, the firm estimates the full-year count could reach about 130 incidents, with losses potentially exceeding several hundred million dollars.

This projection suggests that 2026 could surpass 2025, which researchers described as the most active year on record for crypto-related physical assaults. However, security researchers and law enforcement agencies acknowledge that these figures represent only a fraction of the actual number of incidents.

Underreporting Complicates Tracking of Wrench Attacks

The inherently traumatic nature of these crimes, combined with victims' fear of retaliation, leads to chronic underreporting. This makes wrench attacks far more difficult to track than on-chain exploits, where stolen funds can often be traced in real time across wallets and exchanges.

France Emerges as Europe’s Epicenter for Crypto Violence

Europe has become the primary hotspot for these attacks in 2026, accounting for 82% of CertiK’s verified cases in the first four months. Reported incidents in the US and Asia have declined over the same period, leaving France as the clearest concentration of crypto-related physical crime.

French authorities have publicly acknowledged the scale of the problem. During Paris Blockchain Week 2026, the Ministry of the Interior reportedly identified 41 incidents involving physical coercion tied to digital assets since January—an average of roughly one attack every two and a half days.

Why Is France a Prime Target for Wrench Attacks?

France’s rising exposure may be linked to several factors:

• Industry concentration: The country is home to major crypto companies and executives, including firms such as Ledger and Paymium. This creates a visible network of founders, developers, investors, and early adopters.
• Public visibility: Crypto-related events, meetups, and social media activity make it easier for criminal groups to identify individuals with access to digital assets.
• Data breaches: Leaked tax records, customer files, home addresses, and accounting data can provide criminals with the information needed to target victims directly.

CertiK highlighted a case involving Ghalia C., a tax official at France’s General Directorate of Public Finances, who was accused of using government tax software to search for profiles of crypto-asset holders. She allegedly sold this information to criminal networks, demonstrating how attackers no longer rely solely on social media displays of wealth to identify targets.

Industry and Authorities Respond to Rising Threat

As wrench attacks escalate, the crypto industry and law enforcement agencies are increasingly prioritizing physical security alongside digital defenses. The shift underscores the need for enhanced personal security measures, public awareness, and cross-sector collaboration to combat this evolving threat.