Wrench Attacks Put 2026 on Track to Smash Crypto's Violent Crime Record 🔧

Physical attacks targeting cryptocurrency holders are on pace for their worst year on record, with more than $30 million stolen through violent crimes in the first half of 2026, according to a report released Thursday by blockchain analytics firm Chainalysis. The figure puts 2026 on track to surpass the $58 million stolen across all of 2025.

Chainalysis documented 46 violent crypto-related incidents globally through late June, up from 40 during the same period in 2025. The cases include kidnappings, home invasions and hostage situations, collectively referred to as "wrench attacks." Only 12 of the 46 attempts resulted in payment, giving attackers a 26% success rate, down from 49% in 2025. Chainalysis acknowledged that known cases likely understate the scale of the problem because many attacks go unreported.

"Criminals have recognized that crypto holders are high-value targets because they possess wealth in an instantly and irreversibly transferrable form," Chainalysis wrote. The firm added that the "tradecraft tends to be amateur at the point of violence, but professional at both ends," with victims often identified through data leaks, social media or insider information before low-skilled crews carry out the attacks.

France has emerged as the global epicenter, recording 30 publicly known incidents by midyear, compared with 19 throughout all of 2025. French authorities have counted more than 70 incidents, and Interior Minister Laurent Nuñez put the first-half count at 77 kidnappings, extortions or attempted extortions, up from 45 across all of 2025. The government has introduced a rapid-alert and protection system and pledged greater intelligence-sharing and coordination with the crypto industry. Chainalysis said the surge is likely linked to the alleged misuse of French tax records and a separate breach at crypto tax-reporting company Waltio, which reportedly exposed data belonging to about 50,000 users.

The pattern of attacks is also shifting. Home invasions rose to 37% of documented incidents from 26% in 2023, while attackers increasingly targeted relatives and acquaintances to pressure victims into transferring crypto. "Home invasions allow criminals to confront victims in a controlled environment where they can compel a transfer of funds," Chainalysis wrote. "Kidnappings, by contrast, are much more difficult to execute. Attackers must expend considerable time and resources planning logistics; and the extended periods spent with victims leaves the attacker exposed for longer."

Onchain activity following the attacks varied widely in sophistication. Some attackers sent stolen funds directly to centralized exchanges without attempting to obscure the trail, while others used bridges, decentralized exchanges, MEV bots and other DeFi tools to swap and move assets across chains. "Mid-tier attackers demonstrate greater familiarity with crypto infrastructure," Chainalysis wrote. "They understand that centralized exchanges represent chokepoints with sophisticated compliance programs and user KYC, and attempt to avoid or delay interaction with them." The report said the most advanced cases showed links to broader criminal networks, while earlier enforcement actions included April charges against 88 suspects, including more than 10 minors, across 12 investigations tied to organized gangs behind the wave of attacks.