A surge in crypto-related kidnappings, known as 'wrench attacks,' has placed France under international scrutiny, prompting government officials to acknowledge the severity of the issue and announce new measures to tackle it. This year alone, the country has experienced at least 41 crypto-related kidnappings and home invasions, occurring at a rate of roughly one every two to three days. The French government has responded by launching a prevention platform, which has garnered thousands of registrations, and is preparing additional steps to address the escalating problem. The trend is not limited to France, as global data indicates a 75% increase in verified physical coercion incidents in 2025, with many more cases likely going unreported.
The term 'wrench attack' refers to the use of physical force to gain access to digital assets, often proving easier for attackers than attempting to break encryption. Security researchers note that attackers are shifting their approach from targeting technical vulnerabilities to building profiles of potential victims, tracking their social media activity, public appearances, and leaked datasets to identify points of weakness. The problem is further complicated when attackers receive assistance from government officials, such as in a notable case where a French tax official sold sensitive data to wrench attackers.
The pool of potential victims has expanded, with mid-level holders increasingly being targeted based on limited or indirect signals. Cases now involve families, including children, being targeted alongside crypto-holding parents, making the attacks harder to categorize by severity. Notable cases include the kidnapping of Ledger co-founder David Balland in France, who was rescued after a police operation, and other instances involving prolonged captivity, torture, and severe violence.
Experts observe that both opportunistic and organized groups are involved, with signs of increasing coordination among attackers. After obtaining funds, attackers quickly move to convert the crypto assets into stablecoins and route them across multiple chains, making recovery more difficult. France's role in this trend may be attributed to a combination of factors, including leaked personal data and cross-border criminal networks. Rising asset prices have increased the potential payoff from a single attack, while improvements in digital security have reduced the effectiveness of purely technical exploits, making wrench attacks a more appealing option for criminals.
The visibility of these attacks is also a concern, as many are reported as standard robberies or home invasions without mentioning the crypto element, which can make it harder for authorities to connect cases and identify broader patterns. The increase in attacks has raised questions about the risks of self-custody, a core principle of cryptocurrency, and security experts point to measures such as multi-signature setups, withdrawal delays, and spending limits as ways to reduce risk by limiting access to funds under duress.