A surge in crypto-related kidnappings has placed France at the forefront of a global rise in wrench attacks, with authorities scrambling to respond to the escalating threat. The country has witnessed at least 41 such incidents this year, averaging roughly one every two to three days. Government officials have expressed alarm at the scale of the problem, prompting the preparation of new measures to tackle the issue. A prevention platform has already garnered thousands of registrations, but further action is deemed necessary as incidents continue to rise.
The trend is not limited to France, with global data indicating a 75% increase in verified physical coercion incidents in 2025, and a 250% year-over-year rise in cases involving physical assault. The term 'wrench attack' refers to the use of physical force to extract access to digital assets, often proving easier for attackers than breaking encryption.
Researchers note that attackers are shifting their focus from technical vulnerabilities to building profiles of potential victims, tracking their social media activity, public appearances, and routines to identify points of weakness. The problem is exacerbated when attackers receive insider information, such as in the case of a French tax official who sold sensitive data to wrench attackers.
The pool of potential victims has expanded, with mid-level holders increasingly being targeted, and cases now include families with children being targeted alongside crypto-holding parents. Experts warn that anybody can be a potential victim, with cases involving prolonged captivity, torture, and severe violence.
Organized groups are believed to be involved, with some operating with defined roles and pre-planning, including surveillance and follow-home tactics. After obtaining funds, attackers tend to move quickly, converting crypto assets into stablecoins and routing them across multiple chains, making recovery more difficult. Rising asset prices have increased the potential payoff from a single attack, while improvements in digital security have reduced the effectiveness of purely technical exploits. The increase in attacks has raised questions about the risks of self-custody, a core principle of cryptocurrency, with some security experts recommending measures such as multi-signature setups, withdrawal delays, and spending limits to reduce risk.