The Alarming Rise of Crypto-Related Attacks in France and Beyond

A surge in crypto-related kidnappings, known as wrench attacks, has placed France at the center of a global issue. These attacks involve the use of physical force to gain access to digital assets, and they have become increasingly frequent, brazen, and violent. The French government has taken notice, with officials acknowledging the scale of the problem and announcing plans to implement new measures to tackle it. A prevention platform has already been launched, but more needs to be done as incidents continue to rise. The trend is not limited to France, with security researchers and law enforcement data indicating a global increase in wrench attacks. In 2025, there were 72 verified physical coercion incidents worldwide, representing a 75% increase from the previous year. The term 'wrench attack' refers to the use of physical force to extract access to digital assets, and it has become a significant concern for crypto holders. According to crypto researcher Jameson Lopp, every successful wrench attack sends a message that crypto owners are vulnerable targets. Unlike traditional bank transfers, crypto transactions cannot be reversed, making it easier for attackers to quickly move funds across wallets and chains. Researchers have observed a shift in the way attackers identify victims, from scanning for technical vulnerabilities to building profiles based on social media activity, public appearances, and leaked datasets. They look for points of weakness, such as tying real-world identity, location, and routine too tightly to visible crypto wealth. The problem is exacerbated when attackers receive insider help from government officials. The pool of potential victims has expanded, with mid-level holders being targeted, sometimes based on limited or indirect signals. Cases now include families, with children being targeted alongside crypto-holding parents, making the attacks harder to categorize by severity. In one notable case, Ledger co-founder David Balland was kidnapped in France, and his finger was severed as part of a ransom demand. Other cases have involved prolonged captivity and torture. Lopp notes that both opportunistic and organized groups are involved, but there are signs of increasing coordination. After obtaining funds, attackers tend to move quickly, converting crypto assets into stablecoins and routing them across multiple chains, making recovery more difficult. France's role in this trend may reflect a mix of factors, including cases involving leaked personal data and cross-border criminal networks. Rising asset prices have increased the potential payoff from a single attack, while improvements in digital security have reduced the effectiveness of purely technical exploits. The increase in attacks has raised questions about the risks of self-custody, a core principle of cryptocurrency. Security experts recommend measures such as multi-signature setups, withdrawal delays, and spending limits to reduce risk by limiting how much can be accessed under duress.