A surge in crypto-related kidnappings has placed France at the forefront of a global trend, with wrench attacks becoming increasingly frequent, brazen, and violent. The country has witnessed at least 41 such incidents this year, translating to roughly one every two to three days. This disturbing phenomenon was highlighted during a recent international blockchain and crypto conference in Paris, where government officials expressed concern over the scale of the problem. Minister Delegate to the Interior Ministry, Jean-Didier Berger, announced plans to introduce new measures to tackle the issue, including a prevention platform that has already garnered thousands of registrations.
However, authorities acknowledge that more needs to be done to curb the rising tide of wrench attacks. The term 'wrench attack' refers to the use of physical force to extract access to digital assets, often proving easier for attackers than attempting to break encryption.
According to security researcher Jameson Lopp, every successful wrench attack sends a message that crypto owners are vulnerable targets. Unlike traditional bank transfers, crypto transactions are irreversible, allowing attackers to quickly transfer funds across wallets and chains once a victim is coerced into authorizing a transfer.
Researchers note that attackers are shifting their approach from targeting technical vulnerabilities to building profiles of potential victims, tracking their social media activity, public appearances, and leaked datasets to identify points of weakness. The problem is exacerbated when attackers receive insider information from government officials, as seen in a recent case where a French tax official sold sensitive data to wrench attackers. The pool of potential victims has expanded, with mid-level holders and even families being targeted. Cases have involved prolonged captivity, torture, and severe violence, such as the kidnapping of Ledger co-founder David Balland in January 2025.
Security experts warn that both opportunistic and organized groups are involved, with signs of increasing coordination among attackers. To mitigate the risk of wrench attacks, experts recommend measures such as multi-signature setups, withdrawal delays, and spending limits to limit the amount of funds that can be accessed under duress.
As crypto adoption continues to grow, the frequency and severity of attacks are likely to increase, making it essential to address the risks associated with self-custody and develop effective strategies to combat the threat of wrench attacks.