The Alarming Rise of Crypto-Related Violence: How France Became a Hotspot

A surge in crypto-related kidnappings, known as 'wrench attacks,' has put France at the center of a global trend. These attacks involve the use of physical force to gain access to digital assets, and they are becoming increasingly frequent and violent. According to security researchers and law enforcement data, there were 72 verified physical coercion incidents globally in 2025, a 75% increase from the previous year. The term 'wrench attack' refers to the use of physical force to extract access to digital assets, and for some attackers, it is easier to coerce a person than to break encryption. Researchers say the way attackers identify victims has also changed, with a shift from 'find a wallet' to 'hunt a person.' Attackers build profiles by tracking social media activity, public appearances, and leaked datasets, and they look for points of weakness. The problem is exacerbated when attackers get a helping hand from government officials, such as in a widely known case where a French tax official sold sensitive data to wrench attackers. The pool of potential victims has widened, with mid-level holders increasingly being targeted, sometimes based on limited or indirect signals. Cases now include families, with children targeted alongside crypto-holding parents, making the attacks harder to categorize by severity. In one notable case, Ledger co-founder David Balland was kidnapped in France along with his partner, and during the attack, one of his fingers was severed and sent to associates as part of a ransom demand. Other cases have involved prolonged captivity and torture, such as one in New York, where a crypto investor was held for more than two weeks. Security experts point to measures such as multi-signature setups, withdrawal delays, and spending limits as ways to reduce risk by limiting how much can be accessed under duress. As crypto adoption grows, attacks are becoming more frequent and severe, turning what was once a niche concern into a broader security risk.