A surge in crypto-related kidnappings has put France at the center of a global rise in wrench attacks, with at least 41 incidents reported this year. The country has become the epicenter of these attacks, which involve the use of physical force to extract access to digital assets.
The trend is also increasing globally, with 72 verified physical coercion incidents reported in 2025, a 75% rise from the previous year. Researchers note that attackers are shifting from targeting technical vulnerabilities to building profiles of potential victims, tracking their social media activity, public appearances, and leaked datasets to identify points of weakness. The problem is exacerbated when attackers receive help from government officials, such as in a case where a French tax official sold sensitive data to wrench attackers. The pool of potential victims has expanded, with mid-level holders and families being targeted.
Cases have involved prolonged captivity, torture, and even severe physical harm, such as the kidnapping of Ledger co-founder David Balland, who had his finger severed during an attack. Security experts point to the increasing coordination among attackers, with some groups operating with defined roles and pre-planning.
After obtaining funds, attackers quickly move them into stablecoins and route them across multiple chains, making recovery more difficult. Rising asset prices have increased the potential payoff from a single attack, while improvements in digital security have reduced the effectiveness of purely technical exploits.
The increase in attacks has raised questions about the risks of self-custody, a core principle of cryptocurrency, and security experts recommend measures such as multi-signature setups, withdrawal delays, and spending limits to reduce risk.