A disturbing trend is unfolding in France, where a surge in crypto-related kidnappings has prompted heightened security and government intervention. The country has witnessed at least 41 such incidents this year, equivalent to roughly one every two to three days. This alarming rise has led to increased policing and security at high-profile events, such as the annual international blockchain and crypto conference. Government officials have expressed deep concern over the scale of the problem, with Minister Delegate to the Interior Ministry Jean-Didier Berger announcing plans to introduce new measures to tackle the issue.
A prevention platform has already been launched, attracting thousands of registrations, but further action is deemed necessary as the attacks continue to escalate. The phenomenon of wrench attacks, where physical force is used to extract access to digital assets, has become a global concern, with 72 verified incidents reported worldwide in 2025, representing a 75% increase from the previous year. The term 'wrench attack' refers to the use of physical coercion to gain access to cryptocurrency, often proving easier for attackers than attempting to break encryption.
According to security researcher Jameson Lopp, 'every time a wrench attack is successful, it sends a message that crypto owners are lucrative targets.' Unlike traditional bank transfers, crypto transactions are irreversible, allowing attackers to quickly move funds across wallets and chains once a victim is coerced into authorizing a transfer. Researchers note a shift in the way attackers identify victims, from targeting technical vulnerabilities to building profiles of individuals based on social media activity, public appearances, and leaked datasets. This approach enables attackers to identify points of weakness and track routines. The problem is compounded when government officials inadvertently aid attackers, such as in the case of a French tax official who sold sensitive data to wrench attackers.
The pool of potential victims has expanded, with mid-level holders and even families being targeted. High-profile cases, including the kidnapping of Ledger co-founder David Balland, have highlighted the severity of the issue.
Security experts emphasize that anybody can be a potential victim, with both opportunistic and organized groups involved in the attacks. There are signs of increasing coordination among these groups, with some operating with defined roles and pre-planning.
After obtaining funds, attackers often rapidly convert them into stablecoins and route them across multiple chains, making recovery more challenging. France's role in this trend may be attributed to a combination of factors, including leaked personal data and cross-border criminal networks. Rising asset prices have increased the potential payoff from a single attack, while improvements in digital security have reduced the effectiveness of purely technical exploits. The issue of underreporting also exists, as many wrench attacks are recorded as standard robberies or home invasions, with the crypto element often omitted.
To mitigate the risk of self-custody, security experts recommend measures such as multi-signature setups, withdrawal delays, and spending limits, which can limit the amount of funds accessible under duress. As crypto adoption grows, the frequency and severity of attacks are increasing, transforming what was once a niche concern into a broader security risk.