A disturbing trend is unfolding in France, where a surge in crypto-related kidnappings has prompted authorities to take action. The country has witnessed at least 41 such incidents this year, averaging nearly one every two to three days. This startling statistic has caught the attention of government officials, who have acknowledged the scale of the problem and vowed to introduce new measures to tackle it.
The rise of wrench attacks, which involve the use of physical force to extract access to digital assets, has become a pressing concern for crypto holders worldwide. According to security researchers and law enforcement data, the number of verified physical coercion incidents globally has increased by 75% in 2025, with many more cases likely going unreported.
The term 'wrench attack' refers to the exploitation of physical force to gain access to digital assets, often proving easier for attackers than attempting to break encryption. Crypto transactions, unlike traditional bank transfers, cannot be reversed, making them an attractive target for attackers.
Once a victim is coerced into authorizing a transfer, the funds can be quickly moved across wallets and chains. Researchers note that attackers are now focusing on identifying vulnerable individuals rather than exploiting technical weaknesses. They build profiles of potential targets by monitoring social media activity, public appearances, and leaked datasets, and then track their routines to identify points of weakness.
The problem is exacerbated when attackers receive insider information from government officials or other sources. The pool of potential victims has expanded, with mid-level holders increasingly being targeted, sometimes based on limited or indirect signals. Families, including children, are also being targeted alongside crypto-holding parents, making it challenging to categorize the severity of these attacks. Notable cases include the kidnapping of Ledger co-founder David Balland in France, who was rescued after a police operation, and other incidents involving prolonged captivity, torture, and even waterboarding.
Security experts believe that both opportunistic and organized groups are involved in these attacks, with signs of increasing coordination. After obtaining funds, attackers tend to move quickly, often converting crypto assets into stablecoins and routing them across multiple chains to make recovery more difficult.
The rising trend of wrench attacks in France may be attributed to a combination of factors, including leaked personal data and cross-border criminal networks. As asset prices rise, the potential payoff from a single attack increases, while improvements in digital security have reduced the effectiveness of purely technical exploits. The issue of underreporting also persists, as many wrench attacks are recorded as standard robberies or home invasions without mentioning the crypto element. To mitigate the risks associated with self-custody, a core principle of cryptocurrency, security experts recommend measures such as multi-signature setups, withdrawal delays, and spending limits.
These measures can reduce the risk by limiting the amount of funds that can be accessed under duress, thereby changing the risk and return for attackers.