Two men are set to appear in court following their arrests in connection with the killing of four people in Atizapán de Zaragoza, Mexico, allegedly targeting a cold wallet believed to contain millions of dollars in Bitcoin. The suspects, identified as Diego Sebastián and Gerardo, are accused of carrying out the crime at the home of Jonathan Meléndez, the keyboardist for the rock band Camilo Séptimo, along with his pregnant wife, daughter, and an employee. The family’s golden retriever was also killed during the attack.
Suspects face severe penalties
The Attorney General’s Office of the State of Mexico (FGJEM), the law enforcement agency responsible for overseeing criminal investigations in the region, confirmed that the suspects have been detained and are awaiting a formal court hearing. During this hearing, which is scheduled for Wednesday, a judge will assess whether sufficient evidence exists to advance criminal proceedings against them.
If convicted, Sebastián and Gerardo could face between 25 and 70 years in prison per victim, due to the severity of the charges. One suspect was reportedly a business associate of one of the victims, using this relationship to gain access to the victims’ home, stated Mexico’s security secretary, Omar García Harfuch.
Prosecutors allege that one suspect exploited a business connection to enter the victims’ residence before the attack, leveraging a personal relationship as part of the criminal scheme.
Rise in wrench attacks targeting crypto holders
The term “wrench attack” refers to the use of violence or threats to force individuals to surrender cryptocurrency or provide access to digital wallets. These attacks have become increasingly prevalent, especially as cryptocurrencies grow in value and adoption.
Blockchain security firm CertiK reported a significant increase in such incidents. In the first half of 2026, there were 52 verified wrench attacks globally, up from 39 during the same period in 2025. CertiK documented 20 home invasions targeting crypto owners in the first half of 2026 alone, compared to just one incident a year earlier.
Mini dictionary: CertiK is a blockchain security company that monitors and reports on vulnerabilities, fraud, and security incidents affecting cryptocurrencies and decentralized finance platforms.
| Attack Type | H1 2025 | H1 2026 |
|---|---|---|
| Total wrench attacks worldwide | 39 | 52 |
| Home invasions targeting crypto | 1 | 20 |
The financial impact of wrench attacks has also escalated sharply. According to blockchain analytics firm Chainalysis, over $30 million in cryptocurrency was stolen through wrench attacks in the first half of 2026. Chainalysis specializes in tracking and analyzing blockchain transactions for illicit activities and law enforcement cases.
Mini dictionary: Chainalysis is a blockchain analytics firm providing data and tools for investigating and preventing cryptocurrency-related crime.
Global and regional trends
CertiK reported a 75% year-on-year increase in wrench attacks in 2025, reaching 72 confirmed cases worldwide. France recorded the highest number of incidents with 19 attacks in 2025, while Europe accounted for approximately 40% of all global cases last year.
| Region/Country | Verified Attacks (2025) |
|---|---|
| France | 19 |
| Europe (Total) | Approx. 29 |
| Worldwide | 72 |
Other violent cases have been reported outside of Mexico. In October 2025, convicted Russian crypto fraudster Roman Novak and his wife were killed by attackers who kidnapped them and demanded access to their cryptocurrency wallets, according to media in Russia.
In the first half of 2026, criminals stole more than $30 million in cryptocurrency through wrench attacks, reflecting a rising threat for digital asset holders worldwide.
