Summary
- Chainalysis reports that over $30 million has been taken in violent crypto-related attacks in the first half of 2026.
- Home invasions now represent 37% of reported incidents, with France leading in recorded attacks.
- Attackers are increasingly targeting family members and employing various laundering methods to conceal stolen assets.
According to a report by blockchain analytics company Chainalysis, the number of physical assaults aimed at cryptocurrency holders is on track to reach a record high this year, with more than $30 million reported stolen in the first six months of 2026.
In a report released Thursday, Chainalysis noted 46 violent attacks involving cryptocurrencies through late June, estimating that victims experienced losses exceeding $30 million.
“Violent incidents targeting crypto holders, which include home invasions, kidnappings, and hostage situations—often referred to as 'wrench attacks' in security discussions—have increased significantly in recent times,” Chainalysis stated. “Criminals have identified crypto holders as lucrative targets because their wealth can be transferred instantly and irreversibly.”
A wrench attack is characterized by the use of threats or physical force to coerce victims into surrendering their cryptocurrency.
While kidnappings remain the predominant form of attack, home invasions have surged, rising from 26% of documented incidents in 2023 to 37% this year. Chainalysis also observed that attackers are increasingly targeting the relatives and friends of victims to pressure them into transferring their crypto assets.
“Home invasions provide criminals with an opportunity to confront victims in a controlled setting, enabling them to demand immediate fund transfers,” Chainalysis explained. “In contrast, kidnappings are far more complex to orchestrate, requiring significant time and resources for planning, and the prolonged interaction with victims increases the risk of exposure for the attackers.”
France has emerged as a hotspot for wrench attacks, reporting 30 incidents by mid-2026, more than any other nation. Chainalysis suggested this rise may be linked to a reported breach of tax records that revealed identities of high-net-worth crypto holders.
The report highlights a significant disparity in how attackers manage stolen cryptocurrency. Some criminals appear to have only a rudimentary grasp of crypto, moving stolen funds to centralized exchanges without efforts to conceal their actions, while others exhibit advanced techniques to obscure the flow of funds.
“Mid-tier attackers show a better understanding of crypto systems. They may utilize decentralized exchanges, bridges, MEV bots, and other DeFi tools to swap and transfer assets across different chains,” Chainalysis noted. “They recognize that centralized exchanges pose risks due to their stringent compliance measures and user KYC, and they strive to avoid or delay any interaction with these platforms.”
This report is published amidst a growing trend of violent incidents against crypto investors.
In February, CertiK reported a 75% increase in wrench attacks in 2025, totaling a record 72 incidents, with France as the epicenter. In April, French authorities charged 88 individuals, including over 10 minors, in connection with 12 investigations targeting organized crime behind these violent attacks.
In June, a man was indicted for allegedly participating in a wrench attack while posing as a police officer. In July, CertiK reported that financial losses from wrench attacks reached $124 million in the first half of 2026. Recently, five individuals were convicted in London for their roles in the imprisonment and torture of two French crypto millionaires as part of an extortion plot.
In addition to the rise of wrench attacks in Europe, Bitcoin ransom demands have also made headlines in the U.S. Earlier this year, ransom notes requesting Bitcoin emerged during investigations related to the kidnapping of Nancy Guthrie, mother of "Today" host Savannah Guthrie.