A disturbing trend is unfolding in France, where the frequency and brutality of crypto-related kidnappings, known as wrench attacks, are escalating. The country has witnessed at least 41 such incidents this year, averaging about one every two to three days. This surge has prompted the government to take immediate action, with the Interior Ministry announcing plans to introduce new measures to tackle the issue.
A prevention platform has already been launched, attracting thousands of registrations, but officials acknowledge that more needs to be done to stem the tide of violence. The phenomenon of wrench attacks, where individuals are coerced into surrendering their digital assets, has become a global concern. According to recent data, there were 72 verified cases of physical coercion worldwide in 2025, representing a 75% increase from the previous year.
The term wrench attack refers to the use of physical force to gain access to digital assets, often proving easier for attackers than attempting to break encryption. Crypto transactions, unlike traditional bank transfers, are irreversible, making them an attractive target for criminals. Once a victim is forced to authorize a transfer, the funds can be quickly moved across wallets and chains. Researchers note that attackers are now focusing on identifying vulnerabilities in individuals rather than exploiting technical weaknesses.
They build profiles of potential targets by monitoring social media activity, public appearances, and leaked datasets. The biggest mistake individuals can make is to tie their real-world identity, location, and routine too closely to their visible crypto wealth.
The problem is exacerbated when government officials inadvertently provide attackers with sensitive information. In one notable case, a French tax official sold confidential data to wrench attackers, highlighting the risk of insider leaks and compromised state data.
The pool of potential victims has expanded, with mid-level crypto holders and even families being targeted. Cases have involved prolonged captivity, torture, and severe violence, making it harder to categorize the attacks by severity.
In one instance, the co-founder of Ledger, David Balland, was kidnapped in France, and his finger was severed as part of a ransom demand. Other cases have involved waterboarding and sexual violence. Both opportunistic and organized groups are involved in these attacks, with signs of increasing coordination. After obtaining funds, attackers quickly convert them into stablecoins and route them across multiple chains, making recovery more difficult.
France's role in this trend may be attributed to a combination of factors, including leaked personal data and cross-border criminal networks. Rising asset prices have increased the potential payoff from a single attack, while improvements in digital security have reduced the effectiveness of purely technical exploits. The increase in wrench attacks has raised questions about the risks associated with self-custody, a core principle of cryptocurrency.
Security experts recommend measures such as multi-signature setups, withdrawal delays, and spending limits to reduce the risk of coercion. As crypto adoption grows, attacks are becoming more frequent and severe, transforming what was once a niche concern into a broader security risk.