The attack vector no blockchain can patch has found a new home — literally. According to a new report from CertiK, so-called "wrench attacks" — physical assaults, home invasions, and coercion used to force crypto holders to surrender their assets — extracted $124 million from victims in just six months. That figure represents a staggering 12-fold increase over the equivalent prior period, marking one of the most alarming escalations in the broader crypto security landscape. The threat is no longer confined to dark web exploits and smart contract vulnerabilities; it is standing at front doors, often in residential neighborhoods, and it is getting worse fast.
The wrench attack, so named for the blunt-instrument simplicity of the method — bypass all cryptographic security by threatening the human holding the keys — has long been a known risk in security circles. The joke, borrowed from XKCD's famous security cartoon, used to carry a darkly comedic edge. It no longer does. When losses scale 12x in half a year and cross nine figures, the discussion graduates from theoretical threat modeling into a genuine crisis for anyone publicly associated with meaningful crypto holdings.
What CertiK's findings underscore most sharply is the shift in attack geography. These incidents are no longer primarily occurring in parking lots, at ATMs, or during public exchanges of funds. They are happening inside victims' homes. That transition represents a qualitative escalation in criminal sophistication and boldness. Home invasions require pre-operation surveillance, target identification, and a willingness to sustain prolonged physical confrontation — all of which signal organized criminal activity rather than opportunistic street crime. Whoever is behind these incidents has done their homework, and in many cases, that homework likely began on-chain or on social media, where wealth signals are often broadcast carelessly.
France at the Center
The report identifies France as the global epicenter of this wave of physical crypto attacks — a designation that should prompt serious reflection from both the French government and the broader European regulatory community. France has cultivated a relatively progressive posture toward crypto adoption, with notable institutional interest and a growing retail investor base. That visibility, it now appears, has come with a cost. High-profile crypto wealth concentrated in a country with an active and organized criminal underworld has created a combustible combination. The families of prominent French crypto figures have reportedly been targeted in recent months, suggesting that perpetrators are willing to go after relatives when direct access to a wallet holder is difficult.
The French connection also raises pointed questions about the adequacy of existing law enforcement responses. Physical asset theft sits squarely within the jurisdiction of conventional police forces, yet the crypto dimension complicates both investigation and recovery. Unlike fiat currency seized from a safe, transferred cryptocurrency can be immediately routed through mixers, cross-chain bridges, and privacy protocols, making tracing exponentially harder. Law enforcement agencies across Europe are still building the forensic capabilities needed to follow funds effectively once they move on-chain under duress. That gap is not lost on the criminals exploiting it.
The Infrastructure Gap No One Wants to Fund
From a security infrastructure standpoint, the industry faces an uncomfortable truth: the same properties that make Bitcoin and other crypto assets censorship-resistant and self-sovereign also make them uniquely attractive targets for physical coercion. There is no customer service line to call, no chargeback mechanism, no fraud department. Once keys are surrendered under duress and a transaction is signed, the funds are gone. Cold storage, multisignature wallets, and time-locked transactions offer partial mitigations, but they require deliberate setup and discipline that most retail holders do not maintain.
The $124 million figure captured by CertiK almost certainly understates the true scale of the problem. Victims of physical assault who also face the humiliation of surrendering digital wealth are statistically less likely to report incidents to authorities, particularly in jurisdictions where crypto holdings may carry informal tax or regulatory implications. The data CertiK has compiled likely represents only the visible portion of a considerably larger pool of unreported losses.
What This Means
A 12x increase in losses from physical crypto attacks in a single half-year period is not a trend — it is an emergency. The industry has spent the better part of a decade engineering solutions to on-chain risk: audits, bug bounties, formal verification, insurance protocols. Almost none of that infrastructure addresses the threat of a criminal who simply shows up at your door. As crypto wealth becomes more mainstream and more visible, the human attack surface grows proportionally. The CertiK report should serve as a forcing function: for exchanges and custodians to invest in user education around operational security, for policymakers in France and across the European Union to treat crypto-targeted violent crime as a distinct and urgent category, and for high-net-worth holders to reconsider every public signal of their wealth. The weakest link in any cryptographic system has always been the person holding the keys. That person is now the primary target.
Written by the editorial team — independent journalism powered by Bitcoin News.