A disturbing trend is unfolding in France, where the frequency and brutality of crypto-related kidnappings, known as wrench attacks, are escalating. The country has witnessed at least 41 such incidents this year, averaging nearly one every two to three days. This surge has prompted government officials to acknowledge the severity of the issue and pledge to implement new measures to tackle the problem.
Minister Delegate to the Interior Ministry, Jean-Didier Berger, announced plans to introduce a prevention platform, which has already garnered thousands of registrations. However, authorities concede that more needs to be done to stem the tide of these attacks. The phenomenon of wrench attacks, where individuals are coerced into relinquishing access to their digital assets, has become a global concern. According to data from Certik and crypto researcher Jameson Lopp, there were 72 verified physical coercion incidents worldwide in 2025, representing a 75% increase from the previous year.
The term 'wrench attack' refers to the use of physical force to extract access to digital assets, often because it is easier to coerce a person than to break encryption. Security researchers note that attackers are now focusing on identifying vulnerabilities in individuals rather than exploiting technical weaknesses. They build profiles of potential victims by monitoring social media activity, public appearances, and leaked datasets, making it easier to track routines and identify points of weakness.
The problem is further exacerbated when attackers receive insider information from government officials. In one notable case, a French tax official sold sensitive data to wrench attackers, highlighting the risk of insider leaks and compromised state data. The pool of potential victims has expanded, with mid-level holders increasingly being targeted. Cases now include families, with children being targeted alongside crypto-holding parents, making it challenging to categorize the severity of the attacks.
In January 2025, Ledger co-founder David Balland was kidnapped in France, along with his partner, and was subjected to a brutal attack, including the severing of one of his fingers. Other cases have involved prolonged captivity, torture, and even waterboarding.
Researchers have observed that both opportunistic and organized groups are involved in these attacks, with some groups operating with defined roles and pre-planning. After obtaining funds, attackers tend to move quickly, converting crypto assets into stablecoins and routing them across multiple chains, making recovery more difficult. The rise of wrench attacks in France may be attributed to a combination of factors, including leaked personal data and cross-border criminal networks. As asset prices continue to rise, the potential payoff from a single attack increases, while improvements in digital security have reduced the effectiveness of purely technical exploits.
The issue of underreporting also persists, as many wrench attacks are recorded as standard robberies or home invasions, without mentioning the crypto element. This lack of visibility can make it challenging for authorities to connect cases and identify broader patterns.
The increase in attacks has raised questions about the risks of self-custody, a core principle of cryptocurrency. Some security experts recommend measures such as multi-signature setups, withdrawal delays, and spending limits to reduce the risk of wrench attacks.
As crypto adoption continues to grow, it is essential to address the rising threat of wrench attacks and develop effective strategies to mitigate this risk.