A disturbing trend is unfolding in France, where a surge in crypto-related kidnappings has prompted authorities to reassess their approach to security. The country has witnessed at least 41 such incidents this year, equivalent to roughly one every two to three days. This alarming rate has led to a significant increase in security measures, including police escorts for high-profile crypto events and reinforced protection at prominent venues. The French government has acknowledged the severity of the issue, with Minister Delegate to the Interior Ministry Jean-Didier Berger announcing plans to introduce new measures to tackle the problem.
A prevention platform has already been launched, but further action is deemed necessary as the number of incidents continues to rise. The term 'wrench attack' refers to the use of physical force to gain access to digital assets, often proving easier for attackers than attempting to break encryption.
According to security researchers and law enforcement data, the trend is not unique to France, with a 75% increase in verified physical coercion incidents globally in 2025. The ease with which crypto transactions can be made, combined with the inability to reverse them, makes them an attractive target for attackers. Researchers have noted a shift in tactics, with attackers now focusing on identifying vulnerabilities in individuals rather than solely targeting technical weaknesses. This approach involves building profiles of potential victims, tracking their social media activity, public appearances, and routines to identify points of weakness.
The problem is exacerbated when attackers receive inside help, such as in cases where government officials have sold sensitive data to wrench attackers. The pool of potential victims has expanded, with mid-level holders increasingly being targeted, sometimes based on limited or indirect signals. Cases now include families, with children being targeted alongside crypto-holding parents, making the attacks harder to categorize by severity. High-profile incidents, such as the kidnapping of Ledger co-founder David Balland, have highlighted the brutality of these attacks.
Experts warn that anybody can be a potential victim, with both opportunistic and organized groups involved. There are signs of increasing coordination among attackers, with some groups operating with defined roles and pre-planning. After obtaining funds, attackers tend to move quickly, frequently converting crypto assets into stablecoins and routing them across multiple chains, making recovery more difficult.
France's role in this trend may be attributed to a mix of factors, including cases involving leaked personal data and cross-border criminal networks. Rising asset prices have increased the potential payoff from a single attack, while improvements in digital security have reduced the effectiveness of purely technical exploits. The increase in attacks has raised questions about the risks of self-custody, a core principle of cryptocurrency.
Security experts recommend measures such as multi-signature setups, withdrawal delays, and spending limits to reduce risk by limiting how much can be accessed under duress. As crypto adoption grows, attacks are becoming more frequent and severe, turning what was once a niche concern into a broader security risk.