Skip to main content

Wrench Attacks Skyrocket in First Half of 2026 As France Remains Epicenter of Violent Crypto Kidnappings: CertiK

Importance High

Violent kidnappings are emerging as a structural threat to participants in the crypto sector, with more than 50 wrench attacks recorded in the first half of 2026. Named after a popular xkcd webcomic, wrench attacks involve criminals using violence, intimidation, or confinement to force a crypto holder to reveal their private keys or passwords.

Blockchain security firm CertiK reports 52 recorded attacks in the first six months of the year, a 33.3% increase compared to the first half of 2025. Financial exposure associated with these attacks skyrocketed from approximately $10.5 million in H1 2025 to $124.18 million this year. These figures include ransom demands, funds transferred by victims, and assets frozen by authorities.

France remains the epicenter of wrench attacks, accounting for 33 of the 52 incidents so far in 2026. CertiK attributes the concentration to several factors: France hosts a large and visible cryptocurrency ecosystem, including exchanges, founders, investors, service providers, and frequent industry events. At the same time, the country has experienced a series of major data exposure incidents affecting both private and public-sector organizations, such as the compromise of France Travail and a security incident at the Agence Nationale des Titres Sécurisés (ANTS). These incidents increase the availability of personal information that can be combined with open-source intelligence and blockchain data to identify potential targets.

According to a February report from the Organized Crime Information, Intelligence and Strategic Analysis Service of the Judicial Police (SIRASCO), the kidnappings are often orchestrated by organizers abroad, who coordinate with recruiters in France. These recruiters connect organizers with young people with criminal records, who carry out online intimidation and physical attacks. Victims are typically men aged 20 to 35 involved in digital assets as investors, entrepreneurs, or influencers.

Source: https://dailyhodl.com/2026/07/28/wrench-attacks-skyrocket-in-first-half-of-2026-as-france-remains-epicenter-of-violent-crypto-kidnappings-certik/