A surge in crypto-related kidnappings and home invasions, known as wrench attacks, has placed France at the center of a global issue. The country has experienced at least 41 such incidents this year, occurring at a rate of roughly one every two to three days.
This trend was highlighted during a recent international blockchain and crypto conference in Paris, where government officials expressed concern and announced plans to introduce new measures to tackle the problem. According to Jean-Didier Berger, Minister Delegate to the Interior Ministry, a prevention platform has already been launched, but further action is necessary to address the rising number of incidents.
The term wrench attack refers to the use of physical force to gain access to digital assets, often proving easier for attackers than attempting to break encryption. Security researchers and law enforcement data indicate that such attacks are becoming more frequent and violent globally, with 72 verified physical coercion incidents reported in 2025, representing a 75% increase from the previous year.
Many cases go unreported, with some involving physical assault rising by 250% year-over-year. Attackers are shifting their approach from targeting technical vulnerabilities to building profiles of potential victims, tracking their social media activity, public appearances, and leaked datasets to identify points of weakness. Researchers emphasize that the biggest avoidable mistake is linking real-world identity, location, and routine too closely to visible crypto wealth. The problem is exacerbated when attackers receive insider information, such as in a case where a French tax official sold sensitive data to wrench attackers.
The pool of potential victims has expanded, with mid-level holders being targeted based on limited or indirect signals, and cases now include families with children being targeted alongside crypto-holding parents. Notable cases include the kidnapping of Ledger co-founder David Balland in France and a crypto investor in New York, who was held for more than two weeks. Experts note that both opportunistic and organized groups are involved, with signs of increasing coordination and pre-planning.
After obtaining funds, attackers quickly move the crypto assets, often converting them into stablecoins and routing them across multiple chains, making recovery more difficult. France's role in this trend may be attributed to a combination of factors, including leaked personal data and cross-border criminal networks. Rising asset prices have increased the potential payoff from a single attack, while improvements in digital security have reduced the effectiveness of purely technical exploits. The increase in attacks has raised questions about the risks of self-custody, a core principle of cryptocurrency, with some security experts recommending measures such as multi-signature setups, withdrawal delays, and spending limits to reduce risk by limiting access to funds under duress.