A surge in crypto-related kidnappings has put France at the center of a global rise in wrench attacks, with the country experiencing a notable increase in such incidents. The trend was highlighted during a recent international blockchain and crypto conference in Paris, where security was significantly reinforced. Government officials have expressed concern over the scale of the problem, with at least 41 crypto-related kidnappings and home invasions reported this year, translating to roughly one incident every two to three days. Minister Delegate to the Interior Ministry Jean-Didier Berger announced that new measures are being prepared to tackle the issue, including a prevention platform that has already drawn thousands of registrations.
The rise of wrench attacks, which involve the use of physical force to extract access to digital assets, has become a major concern globally, with 72 verified physical coercion incidents reported in 2025, representing a 75% increase from the previous year. The term 'wrench attack' refers to the exploitation of physical force to gain access to digital assets, often proving easier for attackers than attempting to break encryption. According to crypto researcher Jameson Lopp, every successful wrench attack sends a message that crypto owners are vulnerable targets.
Unlike traditional bank transfers, crypto transactions are irreversible, allowing attackers to quickly move funds across wallets and chains once a victim authorizes a transfer under duress. Researchers note that attackers are now focusing on identifying victims rather than exploiting technical vulnerabilities, with a shift from 'find a wallet' to 'hunt a person.' They build profiles by tracking social media activity, public appearances, and leaked datasets to identify points of weakness. The problem is further exacerbated when attackers receive insider information from government officials, as seen in a case where a French tax official sold sensitive data to wrench attackers. The pool of potential victims has expanded, with mid-level holders being increasingly targeted based on limited or indirect signals.
Cases now include families, with children being targeted alongside crypto-holding parents, making the attacks harder to categorize by severity. Notable cases include the kidnapping of Ledger co-founder David Balland in France, who was rescued after a police operation, and other incidents involving prolonged captivity and torture. Both opportunistic and organized groups are involved in wrench attacks, with signs of increasing coordination and pre-planning.
After obtaining funds, attackers tend to move quickly, converting crypto assets into stablecoins and routing them across multiple chains to make recovery more difficult. France's role in the trend may be attributed to a mix of factors, including cases involving leaked personal data and cross-border criminal networks. Rising asset prices have increased the potential payoff from a single attack, while improvements in digital security have reduced the effectiveness of purely technical exploits.
The increase in attacks has raised questions about the risks of self-custody, a core principle of cryptocurrency, with some security experts recommending measures such as multi-signature setups, withdrawal delays, and spending limits to reduce risk by limiting access to funds under duress.