Crypto Wrench Attacks Surge in Europe, $101M Lost in 2026

Zach Anderson May 08, 2026 14:24

Crypto wrench attacks in Europe spike, accounting for 82% of global incidents in 2026. Losses hit $101M, doubling last year's total.

Physical attacks targeting cryptocurrency holders, known as “wrench attacks,” have caused an estimated $101 million in losses globally during the first four months of 2026, according to a new report from Web3 security firm CertiK. Europe has emerged as the epicenter, with 82% of incidents occurring on the continent.

Wrench attacks involve physical coercion, such as home invasions or kidnappings, to force victims to hand over access to their crypto wallets. CertiK documented 34 such attacks worldwide in early 2026, already nearly doubling the $52.2 million recorded losses from 2025. If the trend continues, CertiK predicts total losses could reach several hundred million dollars by year-end, with up to 130 incidents expected.

France at the Heart of the Crisis

France has been disproportionately affected, with CertiK attributing 24 of the 34 global attacks to the country. However, France’s National Prosecutor’s Office for Organized Crime has reported an even higher count of 47 incidents in the same period. The presence of major crypto firms like Ledger, Paymium, and Binance in France has likely made it a prime target, CertiK noted.

Data breaches have exacerbated the issue. In January, a leak at crypto accounting firm Waltio reportedly exposed sensitive information about asset holders. Additionally, a tax official in France was accused of selling crypto holder data to criminal networks. Combined with a culture of public “flexing” of wealth on social media, these factors have made it easier for attackers to identify and target victims.

A Shift Toward Human Vulnerabilities

The rise in attacks reflects a shift in criminal strategies. As the security of blockchain protocols and wallets improves, criminals are focusing on exploiting the human link. CertiK highlighted that attackers increasingly rely on personal data to plan their operations, eliminating the need for prior physical surveillance. Access to names, addresses, and financial profiles has made victims more vulnerable than ever.

According to TRM Labs, wrench attacks are fueled by the perceived pseudonymity of crypto transactions and the public visibility of wealth. Criminals often use messaging apps like Telegram or Snapchat to recruit local teams of three to five people, who are typically amateurs hired for a few thousand dollars. These teams pose as delivery drivers, police officers, or business partners to ambush their targets.

Legal Crackdowns and Emerging Challenges

In April, French authorities indicted 88 individuals, including 10 minors, in connection with wrench attacks. CertiK noted the growing involvement of minors as a tactic to reduce criminal liability, as younger offenders face lighter sentences under French law.

While security experts like Casa’s Jameson Lopp track incidents to raise awareness, the problem persists. Lopp has documented 31 wrench attacks in 2026, with cases of mistaken identity—where attackers targeted the wrong individuals—also reported.

The increasing sophistication of data-driven targeting underscores the urgent need for crypto holders to enhance their personal security measures. As long as crypto wealth remains easily identifiable, physical coercion will remain a lucrative avenue for bad actors.

• crypto security
• wrench attacks
• certik
• europe