What to know:
- Crypto wrench attacks stole over $30 million as total H1 exposure reached $107 million.
- CertiK documented 52 physical crypto attacks in H1 2026, marking a 33% annual increase.
- France became the main hotspot, with Chainalysis recording 30 known incidents in 2026.
Crypto wrench attacks stole more than $30 million from digital asset holders during the first half of 2026. Chainalysis placed total financial exposure at $107 million. That figure also covered attempted, blocked, and recovered transfers.
The blockchain analytics firm released its report on Thursday. It said losses could exceed the $58 million stolen throughout 2025 if the current pace continues. The final result will depend on attack activity during the rest of 2026.
Also Read: Circle Renews Coinbase USDC Deal Through 2029, Maintains Growth-Focused Strategy
How 52 Crypto Wrench Attacks Put Over $124M at Risk
CertiK also reported a sharp increase in crypto wrench attacks. According to its H1 2026 Wrench Attacks Report, there were 52 verified attacks that occurred in the first six months of the year. This was a 33% increase compared to the 39 cases recorded during the same period of 2025.
The report was published on July 22 by CertiK. It estimated over $124 million in total financial exposure. The figure included ransom demands and coerced transfers, even when attackers failed to retain the funds.
Crypto wrench attacks use violence, threats, or coercion against cryptocurrency holders or their relatives. Criminals force victims to reveal private keys or seed phrases. They may also demand that victims authorize wallet transfers.
Crypto wrench attacks differ from online hacks and scams. They target people and homes instead of exploiting code or conducting social engineering online. This approach allows criminals to bypass the technical protections used for self-custodied assets.
Data Leaks Exposed French Crypto Holders
France emerged as the major hot spot for crypto wrench attacks. Chainalysis recorded 30 publicly known incidents in the country through mid-2026.
French Interior Minister Laurent Nuñez disclosed that at least 70 cases of violence associated with cryptocurrencies were registered by the authorities.
The number of such criminal acts was limited in France before 2025. It was after a 2024 hack of a tax inspector who purportedly leaked dossiers containing names, addresses, and cryptocurrency holdings belonging to wealthy individuals.
Another breach affected crypto tax-reporting company Waltio. The incident exposed information connected to about 50,000 users. The compromised records further increased the number of people who could be identified as potential targets.
Why Wrench Attackers Target Holders and Families
Incidents of home invasion represented 37% of crypto wrench attacks in 2026. The proportion increased drastically compared to the past years, while kidnapping continued being the predominant form of such attacks. Criminals preferred targeting relatives of cryptocurrency users and using them as leverage.
The on-chain analysis classified the attackers into three categories. While opportunistic criminals transferred assets stolen directly to exchanges, the sophisticated ones resorted to cross-chain bridges and cryptocurrency mixers.
Moreover, Chainalysis conducted an analysis of five cases where the victim’s residence in India was determined. Local residents constituted 80% of the victims in those cases, while tourists and expatriates comprised 20%.
India followed the same trend that applied to most other countries analyzed in the report. Cryptocurrency holders became the primary target of attackers rather than tourists. The only country deviating from that trend was the Netherlands.
Also Read: Solana Powers Western Union 2026 Stablecoin Payment Launch
Be the first to comment