The Alarming Rise of Crypto-Related Attacks in France and Beyond

A surge in crypto-related kidnappings and home invasions, known as wrench attacks, has placed France under international scrutiny. The country has witnessed at least 41 such incidents this year, averaging about one every two to three days. In response, government officials have pledged to introduce new measures to tackle the issue, including a prevention platform that has already garnered thousands of registrations. The problem, however, extends beyond France's borders, with a global rise in wrench attacks reported. According to data from Certik and crypto researcher Jameson Lopp, there were 72 verified physical coercion incidents worldwide in 2025, representing a 75% increase from the previous year. The trend is marked by increasing violence, with cases involving physical assault rising by 250% year-over-year. The term 'wrench attack' refers to the use of physical force to gain access to digital assets, often because it is easier to coerce an individual than to break encryption. Security researchers note that attackers are shifting their approach from targeting technical vulnerabilities to building profiles of potential victims, tracking their social media activity, public appearances, and leaked datasets to identify points of weakness. This shift has led to a wider pool of potential victims, including mid-level crypto holders and even families with children. Cases of wrench attacks have involved prolonged captivity, torture, and severe violence, such as the kidnapping of Ledger co-founder David Balland in France, who had his finger severed during the attack. Experts believe that both opportunistic and organized groups are involved, with signs of increasing coordination among attackers. Once funds are obtained, attackers quickly move them into stablecoins and route them across multiple chains, making recovery more difficult. The rise in asset prices has increased the potential payoff from a single attack, while improvements in digital security have reduced the effectiveness of purely technical exploits. The issue of underreporting also exists, as many wrench attacks are recorded as standard robberies or home invasions without mention of crypto. To mitigate the risks, security experts recommend measures such as multi-signature setups, withdrawal delays, and spending limits to reduce the incentive for attackers by limiting access to funds under duress.