The Alarming Rise of Crypto-Related Kidnappings in France and Beyond

A disturbing trend is unfolding in France, where cryptocurrency holders are being increasingly targeted in violent kidnappings and home invasions, known as 'wrench attacks.' This shift is marked by a brazen escalation in frequency and brutality, prompting government officials to acknowledge the scale of the problem and vow to take action. The country has witnessed at least 41 crypto-related kidnappings this year alone, translating to roughly one incident every two to three days. Minister Delegate to the Interior Ministry, Jean-Didier Berger, announced plans to introduce new measures to combat the issue, including a prevention platform that has already garnered thousands of registrations. However, despite these efforts, the number of incidents continues to rise, underscoring the need for further action. The phenomenon is not unique to France, as security researchers and law enforcement data reveal a global increase in wrench attacks, with 72 verified physical coercion incidents reported in 2025, representing a 75% increase from the previous year. The term 'wrench attack' refers to the use of physical force to gain access to digital assets, often because it is easier for attackers to coerce individuals than to bypass encryption. According to crypto researcher Jameson Lopp, 'every time a wrench attack is successful, it sends a message that crypto owners are vulnerable targets.' Unlike traditional bank transfers, crypto transactions are irreversible, allowing attackers to quickly move funds across wallets and chains once a victim is coerced into authorizing a transfer. Researchers note that attackers are evolving their tactics, shifting from targeting technical vulnerabilities to building profiles of potential victims by monitoring social media activity, public appearances, and leaked datasets. They identify points of weakness, such as routines and real-world connections to visible crypto wealth, which can be exploited. The problem is compounded when attackers receive inside help from government officials, as seen in a case where a French tax official sold sensitive data to wrench attackers. The pool of potential victims has expanded, with mid-level holders and even families being targeted, sometimes based on limited or indirect signals. Cases now involve prolonged captivity, torture, and severe violence, such as the kidnapping of Ledger co-founder David Balland in January 2025, who was rescued after a police operation. Lopp observes that both opportunistic and organized groups are involved, with signs of increasing coordination and pre-planning. After obtaining funds, attackers quickly convert them into stablecoins and route them across multiple chains, making recovery more challenging. France's role in this trend may be attributed to a combination of factors, including leaked personal data and cross-border criminal networks. Rising asset prices have increased the potential payoff from a single attack, while improvements in digital security have reduced the effectiveness of purely technical exploits. The visibility of wrench attacks might be significantly underreported, as many are recorded as standard robberies or home invasions without mentioning the crypto element. This underreporting can hinder authorities' ability to connect cases and identify broader patterns. The increase in attacks has raised questions about the risks of self-custody, a core principle of cryptocurrency. Security experts recommend measures such as multi-signature setups, withdrawal delays, and spending limits to reduce risk by limiting access to funds under duress. As crypto adoption grows, attacks are becoming more frequent and severe, transforming what was once a niche concern into a broader security risk.