A surge in crypto-related kidnappings and home invasions, known as wrench attacks, has placed France at the forefront of a global issue. The country has experienced at least 41 such incidents this year, occurring at a rate of roughly one every two to three days. This trend has prompted government officials to acknowledge the severity of the problem and announce plans to implement new measures to combat it.
The Interior Ministry is preparing a set of measures in collaboration with the Minister Delegate to address the growing concern. A prevention platform has already been launched, with thousands of registrations, but further action is deemed necessary as incidents continue to rise. The term 'wrench attack' refers to the use of physical force to gain access to digital assets, which can be an easier method for attackers than attempting to break encryption. According to security researchers and law enforcement data, attacks on crypto holders are becoming more frequent and violent globally.
In 2025, there were 72 verified physical coercion incidents worldwide, representing a 75% increase from the previous year. Many of these cases go unreported. The ease with which crypto transactions cannot be reversed once a victim authorizes a transfer under duress contributes to the appeal of wrench attacks for attackers.
Researchers note a shift in the way attackers identify victims, from scanning for technical vulnerabilities to building profiles based on social media activity, public appearances, and leaked datasets. This shift allows attackers to identify points of weakness and track routines. The biggest avoidable mistake, according to experts, is tying real-world identity, location, and routine too closely to visible crypto wealth.
The problem is exacerbated when attackers receive assistance from government officials, as seen in a case where a French tax official sold sensitive data to wrench attackers. The pool of potential victims has expanded, with mid-level holders being targeted based on limited or indirect signals. Cases now include families, with children being targeted alongside crypto-holding parents, making the attacks harder to categorize by severity. Notable cases include the kidnapping of Ledger co-founder David Balland in France, where one of his fingers was severed during the attack, and cases involving prolonged captivity and torture.
Experts observe that both opportunistic and organized groups are involved, with signs of increasing coordination among attackers. After obtaining funds, attackers tend to move quickly, converting crypto assets into stablecoins and routing them across multiple chains, making recovery more difficult.
France's role in this trend may be attributed to a combination of factors, including cases involving leaked personal data and cross-border criminal networks. Rising asset prices have increased the potential payoff from a single attack, while improvements in digital security have reduced the effectiveness of purely technical exploits.
The increase in attacks has raised questions about the risks of self-custody, a core principle of cryptocurrency. Security experts recommend measures such as multi-signature setups, withdrawal delays, and spending limits to reduce risk by limiting access to funds under duress.
As crypto adoption grows, attacks are becoming more frequent and severe, turning what was once a niche concern into a broader security risk.