Key facts
- Home invasions became the most frequent type of crypto wrench attack in the first half of 2026.
- CertiK verified 52 wrench attacks globally in H1 2026, an increase from 39 in H1 2025.
- France accounted for 33 of the 52 verified wrench attacks.
- The financial exposure linked to these attacks reached $124.1 million in H1 2026.
- French authorities have made 200 arrests in response to crypto-related crimes.
Home invasions have emerged as the most prevalent method for crypto wrench attacks in the first half of 2026, according to a report by blockchain security firm CertiK. The firm verified 52 wrench attacks globally during this period, marking a 33.3% increase from the 39 incidents recorded in the same period of 2025. Home invasions specifically rose to 20 incidents from just one a year earlier, while kidnappings increased to 16 from 12. Robberies saw a significant decrease, falling from five to one incident.
The financial impact of these attacks has also escalated dramatically, with recorded exposure reaching approximately $124.1 million in H1 2026, a substantial jump from $10.5 million in H1 2025. This figure encompasses confirmed thefts, ransom demands, and other related financial activities.
France has become a focal point for these attacks, accounting for 33 of the 52 verified incidents globally. CertiK noted that this concentration might be due to France's more visible crypto ecosystem, potentially leading to more data breaches that link personal identities and home addresses to perceived crypto wealth. French Interior Minister Laurent Nuñez reported that authorities recorded 77 crypto-linked kidnappings, extortion cases, or attempted extortion cases in the first half of 2026, compared to 45 for the entirety of 2025.
In response to the rising threat, French authorities have implemented a dedicated prevention platform and a rapid-alert system for crypto holders. These emergency measures have led to approximately 200 arrests. CertiK suggests that the increasing reliance on physical coercion challenges traditional self-custody advice and recommends enhanced security measures such as multisignature arrangements, withdrawal delays, and spending limits.