France is experiencing an uptick in kidnappings linked to cryptocurrency, with “wrench attacks” becoming increasingly common, aggressive, and violent.
This rise in crime was highlighted during an annual blockchain and crypto conference, where VIP attendees were escorted by a police motorcade to a dinner at the Palace of Versailles. Enhanced security measures were also evident at the Carrousel du Louvre, the conference venue.
The surge in wrench attacks has drawn international attention, prompting government officials to speak at the Paris conference about their concerns. They reported at least 41 crypto-related kidnappings and home invasions in France this year—an alarming rate of approximately one every two to three days.
Jean-Didier Berger, the Minister Delegate to the Interior Ministry, announced that new strategies are being formulated with Interior Minister Laurent Nuñez to address this alarming trend. A prevention initiative has already garnered thousands of sign-ups, but officials indicate that further actions are necessary due to the rising incidents.
The Center of Wrench Attacks
France has emerged as a hotspot for a global increase in wrench attacks, with security experts and law enforcement data indicating a growing frequency and brutality of assaults on crypto holders. In 2025 alone, there were 72 confirmed cases of physical coercion worldwide, reflecting a 75% increase from the previous year. The rise in physical assaults has been even more stark, skyrocketing by 250% year-over-year.
The term “wrench attack” describes the use of force to gain access to digital assets, with some perpetrators finding it easier to intimidate individuals rather than break encryption. Jameson Lopp noted, “Every successful wrench attack signals to the world that crypto owners are attractive targets.” Unlike traditional bank transactions, cryptocurrency transfers cannot be reversed, allowing for rapid movement of stolen funds once a victim is coerced.
Identifying Vulnerabilities
Researchers indicate a shift in how attackers select their victims, moving from “finding a wallet” to “hunting a person.” Phil Ariss from TRM Labs emphasized that attackers now build profiles based on social media activity, public appearances, and leaked data, assessing routines to identify vulnerabilities. Such ties between personal identity and visible crypto wealth pose significant risks.
This issue has been compounded by instances where government personnel have unintentionally assisted attackers, as seen in a case where a French tax official provided sensitive information to wrench attackers. Consequently, mid-level crypto holders have become increasingly targeted based on minimal signals.
A Widespread Threat
These attacks extend to families, with children being targeted alongside their crypto-investing parents. One notable incident involved Ledger co-founder David Balland, who was kidnapped along with his partner, resulting in severe violence and a police rescue. In other instances, victims faced prolonged captivity and torture to force access to their assets.
Experts note that both opportunistic and organized crime groups are increasingly involved in these attacks, with a trend toward greater coordination, including pre-planning and surveillance tactics. After assets are obtained, attackers often convert stolen funds into stablecoins to obfuscate the trail, complicating recovery efforts.
Increased Risks and Considerations
The rise in crypto asset values has amplified the potential rewards from attacks, making them more appealing compared to traditional bank heists. Many wrench attacks go unreported or are classified simply as robberies, obscuring the true scale of the issue.
The ongoing increase in these incidents raises concerns about the safety of self-custody—a fundamental concept in cryptocurrency. Security experts advocate for measures such as multi-signature setups, withdrawal delays, and spending caps to minimize risks by restricting accessibility under duress. These strategies may not eliminate threats, but they could reduce the allure for attackers.
As cryptocurrency adoption rises, the frequency and severity of these attacks are transforming a previously niche concern into a broader safety issue.
