Wrench attacks steal $30M in H1 2026, on track for record

Chainalysis estimates violent “wrench” attacks stole over $30 million from cryptocurrency holders in the first half of 2026, documenting 46 incidents through late June. The analytics firm says physical assaults are on pace for a record year.

The incidents include home invasions, kidnappings and hostage situations. Chainalysis’s report describes attackers viewing crypto holders as high-value targets because crypto can be moved instantly and irreversibly. The report noted, “Violent attacks targeting crypto holders, including home invasions, kidnappings, and hostage situations, sometimes called ‘wrench attacks’ in security circles, have surged in recent years.”

Home invasions made up 37% of documented incidents in the first half of 2026, up from 26% in 2023. Kidnappings remain the most frequent single type of attack but require more planning and longer exposure for attackers. The report observed that home invasions “allow criminals to confront victims in a controlled environment where they can compel a transfer of funds.”

Attackers increasingly target relatives and acquaintances to pressure victims into transferring crypto. Handling of stolen funds varies: some attackers with limited crypto knowledge move assets directly to centralized exchanges, while more experienced perpetrators use decentralized exchanges, cross-chain bridges, MEV bots and other decentralized finance tools to obscure transfers. The report stated that “mid-tier attackers demonstrate greater familiarity with crypto infrastructure” and may avoid centralized exchanges because they are chokepoints with compliance and KYC.

Geographically, France recorded the largest number of publicly known incidents, with 30 cases through mid-2026. Chainalysis linked the rise in French incidents in part to an alleged breach that exposed tax records and information on high-net-worth crypto holders. French authorities expanded investigations and in February charged 88 suspects across 12 probes; in June a suspect was indicted on allegations of posing as a police officer during an attack. In London, five men were convicted for imprisoning and torturing two French crypto holders in an extortion scheme.

Other security trackers recorded related increases. One firm found wrench attacks rose 75% in 2025 to a record 72 incidents and estimated financial exposure at $124 million in the first half of 2026. In the United States, Bitcoin ransom demands appeared in high-profile investigations, including the kidnapping of a television host’s mother, where ransom notes referenced cryptocurrency.

Chainalysis emphasized that attackers vary in technical skill and laundering methods, which affects how quickly and where stolen funds re-enter regulated financial channels.