Physical Crypto Thefts Skyrocket to $30 Million Amid 'Wrench Attacks'
Chainalysis reports a dramatic surge in physical cryptocurrency thefts, with 'wrench attacks' like home invasions and kidnappings costing victims $30 million in the first half of 2026.
Cryptocurrency thieves are increasingly resorting to physical violence and coercion to steal digital assets, with losses from these "wrench attacks" escalating to an estimated $30 million in the first half of 2026, according to a new report by blockchain analytics firm Chainalysis.
The firm's forthcoming mid-year crypto crime report, detailed on August 6, highlights a concerning trend where criminals physically confront victims to gain access to their cryptocurrency holdings. When attempted extractions, such as ransoms and blocked stolen funds, are included, the total figure rises to $107 million.
"Criminals have recognized that crypto holders are high-value targets because they possess wealth in an instantly and irreversibly transferrable form," the report stated. This realization has driven a shift towards more direct, physical methods of theft, bypassing the more common online attack vectors.
The nature of these physical attacks is also evolving. While kidnappings have remained a stable component of wrench attacks, home invasions have seen a significant rise, accounting for 37% of incidents in early 2026, up from 26% in 2023. "Home invasions allow criminals to confront victims in a controlled environment where they can compel a transfer of funds," Chainalysis noted, contrasting this with the higher logistical challenges and risks associated with kidnappings.
France has emerged as the country most severely affected by these physical crypto thefts. Chainalysis suggests this could be linked to a significant data breach in 2024, where a local tax official allegedly leaked sensitive information on high-net-worth crypto holders, including their names, addresses, holdings, and contact details. This leaked data likely provided criminals with targeted lists of potential victims.
Furthermore, attackers are increasingly targeting family members of crypto holders to force compliance. In France, over 40% of wrench attack incidents in the first half of 2026 involved threats or harm to a victim's relatives, indicating a more ruthless and widespread application of pressure tactics.
Chainalysis also categorized the sophistication of crypto theft operations into three levels. Unsophisticated attacks are opportunistic and involve direct transfers to centralized exchanges, making them easier to trace. Sophisticated attacks utilize decentralized exchanges, bridges, and DeFi tools to obscure the trail, while "criminally embedded attacks" are linked to organized crime networks, with funds sometimes laundered through services associated with cartels and terrorist financing.
The surge in physical crypto thefts underscores a disturbing evolution in criminal tactics, moving beyond purely digital exploits to direct, violent confrontation. As cryptocurrency holdings become more attractive targets, law enforcement and security firms face the challenge of addressing both online vulnerabilities and increasingly brazen physical threats.