A disturbing pattern is emerging in France, where crypto-related kidnappings, known as "wrench attacks," are becoming more common, brazen, and violent. This trend was highlighted during a recent international blockchain and crypto conference in Paris, where security was noticeably enhanced. Government officials expressed concern over the scale of the problem, revealing that France has experienced at least 41 crypto-related kidnappings and home invasions so far this year, equivalent to one every two to three days.
Minister Delegate to the Interior Ministry, Jean-Didier Berger, announced that new measures are being developed to tackle the growing issue, including a prevention platform that has already garnered thousands of registrations. However, authorities acknowledge that more needs to be done as incidents continue to rise. The term "wrench attack" refers to the use of physical force to gain access to digital assets, which can be an easier option for attackers than attempting to break encryption.
According to security researchers and law enforcement data, the trend is not limited to France, with a 75% increase in verified physical coercion incidents globally in 2025, and a 250% rise in cases involving physical assault. Attackers are shifting their approach from targeting technical vulnerabilities to building profiles of potential victims, tracking their social media activity, public appearances, and leaked datasets to identify points of weakness. The problem is exacerbated when attackers receive assistance from government officials, such as in a notable case where a French tax official sold sensitive data to wrench attackers.
The pool of potential victims has expanded, with mid-level holders being targeted based on limited or indirect signals. Cases now include families, with children being targeted alongside crypto-holding parents, making the attacks harder to categorize by severity. In some instances, attacks have involved prolonged captivity, torture, and even severe physical harm, such as the kidnapping of Ledger co-founder David Balland in France. Security experts suggest that both opportunistic and organized groups are involved, with signs of increasing coordination and pre-planning.
After obtaining funds, attackers often move quickly, converting crypto assets into stablecoins and routing them across multiple chains, making recovery more difficult. France's role in this trend may be attributed to a combination of factors, including cases involving leaked personal data and cross-border criminal networks.
The increase in attacks has raised questions about the risks of self-custody, a core principle of cryptocurrency, with some security experts recommending measures such as multi-signature setups, withdrawal delays, and spending limits to reduce risk. As crypto adoption grows, attacks are becoming more frequent and severe, transforming what was once a niche concern into a broader security risk.