Physical attacks against cryptocurrency holders, commonly known as "wrench attacks," have increased twelve-fold over the past year, resulting in $124 million stolen during the first half of 2026 alone, according to a new report from blockchain security firm CertiK. The findings mark a disturbing shift in crypto-related crime, moving from online exploits to violent, in-person confrontations at victims' residences.
The report identifies home invasions as the predominant methodology for these assaults, with incidents rising dramatically from just one recorded case in the first half of 2025 to twenty confirmed home invasions during the same period this year, as detailed by Cointelegraph. This evolution suggests perpetrators are increasingly targeting individuals they believe hold significant digital asset wealth, bypassing complex cybersecurity measures through direct physical coercion.
Geographic analysis reveals France as the global epicenter of this phenomenon, accounting for thirty-three of the fifty-two verified wrench attacks documented worldwide in the first six months of 2026. The concentration of incidents within a single jurisdiction highlights how regional factors—potentially including local crypto adoption rates, law enforcement response capabilities, or criminal network organization—may influence the prevalence of such crimes, according to Decrypt.
The total of fifty-two verified physical attacks represents a significant escalation in frequency, while the value targeted has jumped more than tenfold compared to previous periods, as reported by The Block. The disparity between the number of incidents and the massive financial impact suggests attackers are successfully identifying and targeting high-net-worth individuals rather than conducting random assaults.
In response to these trends, CertiK recommends that cryptocurrency holders strictly limit the public dissemination of information connecting their personal identity, residential location, or daily routines to their digital asset holdings. The security firm emphasizes that operational security extends beyond digital hygiene to include physical safety measures, as criminals increasingly exploit open-source intelligence and social media to identify and locate potential victims.