Crypto 'wrench attacks' are surging — why a hardware wallet isn't the whole answer

Blockchain security firm CertiK verified 52 “wrench attacks” worldwide in the first half of 2026 — cases in which criminals use violence or threats to force crypto holders to hand over their funds — up about a third from 39 a year earlier. The recorded financial exposure jumped nearly 12-fold to about $124 million. Europe accounted for three-quarters of the cases, and France alone for 33 of the 52.

A “wrench attack” is the low-tech opposite of a hack: instead of breaking into a wallet online, the attacker goes after the person. CertiK found that home invasions rose to 20 incidents from just one a year earlier, making them the most common form, while kidnappings climbed to 16 from 12. The figures cover more than confirmed thefts — they include ransom demands and frozen or recovered assets — and CertiK cautions that under-reporting is severe, since victims fear retaliation.

France's outsized share, CertiK says, may reflect its visible crypto scene combined with a run of data breaches — including the France Travail and ANTS incidents — that link people's identities and home addresses to perceived crypto wealth, effectively handing attackers ready-made target lists. France's interior minister said authorities recorded 77 crypto-linked kidnapping, extortion or attempted-extortion cases in the first half of the year, up from 45 in all of 2025, with emergency measures leading to 200 arrests.

For a beginner, the uncomfortable lesson is that a hardware wallet or a well-hidden seed phrase protects you from online theft but not from someone forcing you to unlock it. That is why CertiK now points to arrangements like multi-signature or multiparty-computation setups, withdrawal delays, spending limits, and signers kept in separate locations, so that no single threatened person can release everything at once.

This is information, not advice, but the direction is clear. The strongest everyday defenses are the unglamorous ones: don't advertise how much you hold, minimize the data that ties your real identity to your wallet, and set things up so that being cornered can't instantly drain you. The technology to keep attackers out of your accounts is mature; keeping them away from you is the part that now needs the same care.