CertiK, a blockchain security company based in the United States, published new data showing a sharp increase in physical attacks targeting cryptocurrency holders during the first half of 2026. The firm recorded 52 confirmed incidents globally, a 33.3% rise from the 39 cases identified in the same period last year. The total value of assets exposed in these attacks reached approximately $124.1 million, up from $10.5 million in the previous year.
Physical threats increase as crypto holdings gain visibility
CertiK defines these incidents, commonly referred to as ‘wrench attacks’, as situations where violence, intimidation, or threats force individuals to transfer digital assets, provide private keys, or unlock wallets. This method bypasses even the strongest digital safeguards by targeting the person rather than the software.
“This is an established threat vector for cryptocurrency holders,” CertiK reported, emphasizing the growing danger to individuals whose real-world identities and crypto ownership are publicly known.
Incidents of violence, intimidation, and credible threats continue to challenge even those with robust digital security, as attackers focus on the individual rather than the system.
The reported exposure value of $124.1 million reflects the sum of ransom demands, payments made by victims, and assets that were later frozen by authorities or service providers. Not all these funds were ultimately lost.
On average, each incident saw recorded exposures climb from around $270,000 in the first half of 2025 to about $2.39 million in the first half of 2026. CertiK also noted this number likely underestimates the full scale, as many victims remain silent due to concerns over safety, taxation, or reputation.
France emerges as Europe’s hotspot for ‘wrench attacks’
Europe accounted for 39 of the 52 confirmed attacks, with France alone reporting 33 cases. CertiK identified Europe as the most at-risk region for cryptocurrency-related physical attacks, with France leading the surge.
Home invasions involving crypto holders have increased significantly, rising from just one publicly reported case in the first half of 2025 to 20 in the same period this year. Kidnappings linked to digital asset coercion also rose from 12 to 16 cases.
Cases involving torture remained at four, while one incident in each period involved murder associated with crypto demands.
The spike in attacks is attributed mainly to the rise in home invasions, with perpetrators increasingly tracking targets to their residences.
Mini dictionary: CertiK is a leading blockchain security firm that provides audit, monitoring, and threat intelligence services to help protect digital assets from vulnerabilities and attacks.
| Region | Confirmed Attacks (H1 2026) |
|---|---|
| France | 33 |
| Rest of Europe | 6 |
| Other regions | 13 |
| Total | 52 |
Rising incidents concentrate in early 2026
The increase in attacks was concentrated in the first quarter of 2026, which saw 35 reported cases compared to 22 in the same period the previous year. January alone registered 15 incidents (up from 9), while March counted 13 (versus 7 previously). April experienced a jump to 8 cases from 2 the year before.
May and June incident numbers dropped below 2025 levels, which CertiK attributes to stricter personal security, reporting delays, and law-enforcement efforts. The second quarter of both years closed with 17 documented incidents.
If the current trend continues throughout 2026, the total number of wrench attacks could reach around 100 by year’s end. However, CertiK stated that differences between the quarters mean this is not a formal forecast.
CertiK differentiated these attacks from trading losses suffered by memecoin traders, stating that targets of wrench attacks are often those whose significant holdings and public profiles make them attractive to attackers.
CertiK’s recommendations for crypto holders
CertiK advises individuals to reduce any direct connection between their public identities and their crypto assets. Limiting information that connects names, locations, or daily routines to wallet holdings can help mitigate risk. Large amounts of digital assets should be stored in such a way that no single person can transfer them independently.
Further safety recommendations include separating wallets, signing tools, and recovery data. Home security should be a priority, and families should have an emergency plan. When traveling, holders are encouraged to avoid accessing sensitive accounts on mobile devices.
