Kidnappings targeting people involved in cryptocurrency are becoming a serious and growing problem. Over 50 such incidents, often involving forceful entry and robbery, occurred in the first six months of 2026.
Wrench attacks, named after a well-known xkcd comic, happen when someone uses force, threats, or imprisonment to make a cryptocurrency owner hand over their private keys or passwords.
As a crypto investor, I’m definitely concerned about security. CertiK just reported that there were 52 attacks on blockchain projects in the first six months of this year, which is a significant jump – up over 33% compared to the same period last year. It’s worrying to see these numbers going up; it really highlights how important project security audits are.
The financial impact of these attacks has increased dramatically, jumping from approximately $10.5 million in the first half of 2025 to $124.18 million this year. This total includes ransom payments, money sent by victims, and assets that have been frozen by law enforcement, as reported by CertiK.
France continues to be the primary target for “wrench attacks,” accounting for 33 out of the 52 incidents reported this year. CertiK believes several factors are contributing to this trend within the country.
France has a thriving cryptocurrency scene, with many exchanges, companies, investors, and events. However, the country has also seen several large-scale data breaches affecting both government and private organizations, like those recently experienced by France Travail and ANTS. These breaches make personal information more accessible, which could be combined with publicly available online data and blockchain records to identify individuals at risk.
A recent report from France’s police intelligence unit (SIRASCO) indicates that kidnappings are frequently planned by individuals located outside of the country, who then work with recruiters within France to carry out the crimes.
Recruiters connect organizers with young people who have criminal histories, and these individuals then engage in online harassment and physical assaults.
Those kidnapped are typically men aged 20 to 35 who work with or invest in cryptocurrencies or other digital assets, or who are well-known figures in that world.
2026-07-28 11:22