Criminals stole more than $30 million through physical attacks targeting cryptocurrency holders during the first half of 2026, placing the year on a trajectory to surpass the record $58 million stolen in 2025.

In a report released on Thursday, blockchain analytics firm Chainalysis stated that 46 violent, crypto-related incidents were documented globally through late June. This marks an increase from the 40 incidents recorded during the same timeframe in 2025. The documented events include kidnappings, home invasions, and hostage situations—crimes broadly classified as "wrench attacks," a term popularized by a well-known webcomic illustrating that physical coercion can bypass even the strongest cryptographic defenses.

Unlike traditional bank transfers, blockchain transactions are irreversible and cannot be frozen once confirmed, making crypto holders especially attractive targets for extortion once their identities or residential addresses are exposed.

According to Chainalysis data on the success rate of crypto wrench attacks by year, only 12 of the 46 attempts resulted in a payment, yielding a 26% success rate for attackers. This represents a decline from a 49% success rate in 2025. However, the analytics firm acknowledged that reported cases likely underestimate the true scale of the problem, as many incidents go unreported.

Describing the operational dynamics, Chainalysis noted that the "tradecraft tends to be amateur at the point of violence, but professional at both ends." Victims are frequently selected utilizing data leaks, social media profiles, or insider information. Subsequently, low-skilled crews are dispatched to carry out the physical attacks.

France Remains a Wrench Attack Hotspot

Chainalysis identified France as a primary center for these physical assaults, recording 30 publicly known incidents by mid-year. This figure already exceeds the 19 cases reported throughout the entirety of 2025. France has grown into one of Europe's largest crypto markets in recent years, with Paris positioning itself as a hub for digital asset firms after post-Brexit relocations, which may have expanded the pool of identifiable high-net-worth crypto investors. The report noted that French authorities have tracked more than 70 incidents, suggesting the actual total may be substantially higher.

In July, Interior Minister Laurent Nuñez stated that the first-half count reached 77 kidnappings, extortions, or attempted extortions, a sharp rise from 45 in all of 2025. In response, the French government introduced a rapid-alert and protection system, alongside promises of enhanced intelligence-sharing and coordination with the cryptocurrency industry.

The report indicated that the alleged misuse of French tax records was the most likely driver of the surge in France. A French tax official reportedly accessed and sold crypto investor information to criminals. Additionally, a data breach involving crypto tax-reporting service Waltio allegedly exposed data belonging to approximately 50,000 users.

Onchain activity connected to these attacks displayed varying levels of sophistication. While some perpetrators transferred stolen funds directly to centralized exchanges, others leveraged cross-chain bridges, decentralized exchanges, and crypto laundering services. Chainalysis noted that the most advanced operations showed direct links to broader organized criminal networks.

Related: Spain arrests suspect in 2025 kidnapping of Ledger co-founder

Magazine: Do the Coldcard attacks mean all hardware wallets are now insecure?