Violent Crypto Thefts Could Hit Record as France Attacks Surge

Recorded financial exposure from physical attacks on cryptocurrency holders reached $124.1 million during the first half of 2026, almost 12 times the amount documented a year earlier.

Blockchain security firm CertiK verified 52 so-called wrench attacks between January and June, up 33.3% from 39 during the same period in 2025. France accounted for 33 cases, or 63.5% of the global total, while Europe represented 39 of the 52 incidents.

The $124.1 million figure does not represent confirmed criminal profits alone. CertiK’s calculation includes stolen assets, ransom demands, payments later recovered or frozen, failed demands, and other amounts connected to publicly documented cases. Confirmed losses may therefore differ substantially, particularly because many victims never report attacks.

Home invasions recorded the sharpest increase, jumping from one case in the first half of 2025 to 20 this year. Kidnappings rose from 12 to 16, while several attacks involved relatives or associates used to pressure the intended crypto holder.

France’s Official Count Is Even Higher

CertiK’s total is narrower than figures cited by French authorities. Interior Minister Laurent Nuñez said police recorded 77 crypto-related physical incidents during the first half of 2026, compared with 45 reported throughout 2025.

The security firm included only cases it could independently verify through public reporting, court records, victim testimony, or on-chain evidence.

Researchers pointed to France’s large and highly visible crypto sector, alongside data breaches that exposed names, contact details, and residential information. Criminal groups can combine those records with social media activity, public wallet data, and corporate profiles to identify potential targets.

French prosecutors have charged 88 people, including more than 10 minors, across 12 investigations into kidnappings, extortion, and related organized crime offenses. Seventy-five were placed in pre-trial detention.

The shift toward home invasions also exposes the limits of conventional self-custody protections. Hardware wallets and offline seed phrases can stop remote hackers, but not attackers forcing a victim to authorize a transaction.

CertiK recommended multisignature or MPC setups, withdrawal delays, and vault structures that prevent one person from moving an entire balance under duress.