A disturbing trend is emerging in France, where crypto-related kidnappings, known as 'wrench attacks,' are becoming increasingly frequent, brazen, and violent. This shift was evident during a recent international blockchain and crypto conference in Paris, where a police motorcade escorted VIP guests and security was reinforced at the event venue. Government officials acknowledged the scale of the problem, revealing that France has experienced at least 41 crypto-related kidnappings and home invasions this year, which translates to approximately one incident every two to three days. Minister Delegate Jean-Didier Berger announced that new measures are being prepared to tackle the growing issue, including a prevention platform that has already garnered thousands of registrations.
However, authorities recognize that further steps are necessary as incidents continue to rise. The term 'wrench attack' refers to the use of physical force to extract access to digital assets, which can be an easier alternative to breaking encryption for some attackers.
According to security researchers and law enforcement data, the trend is not limited to France, with a 75% increase in verified physical coercion incidents globally in 2025. The way attackers identify victims has also evolved, with a shift from targeting technical vulnerabilities to building profiles based on social media activity, public appearances, and leaked datasets. Researchers emphasize that the biggest avoidable mistake is tying real-world identity, location, and routine too closely to visible crypto wealth. The problem is exacerbated when attackers receive insider information from government officials, as seen in a case where a French tax official sold sensitive data to wrench attackers.
The pool of potential victims has expanded, with mid-level holders being targeted based on limited or indirect signals. Cases now include families, with children being targeted alongside crypto-holding parents, making the attacks harder to categorize by severity. In one notable case, Ledger co-founder David Balland was kidnapped in France along with his partner, and his finger was severed as part of a ransom demand.
Other cases have involved prolonged captivity, torture, and even waterboarding and sexual violence. Experts note that both opportunistic and organized groups are involved, with signs of increasing coordination.
After obtaining funds, attackers tend to move quickly, converting crypto assets into stablecoins and routing them across multiple chains, making recovery more difficult. France's role in this trend may be attributed to a mix of factors, including leaked personal data and cross-border criminal networks.
Rising asset prices have increased the potential payoff from a single attack, while improvements in digital security have reduced the effectiveness of purely technical exploits. The increase in attacks has raised questions about the risks of self-custody, a core principle of cryptocurrency. Security experts recommend measures such as multi-signature setups, withdrawal delays, and spending limits to reduce risk by limiting access to funds under duress.