Home invasions top crypto wrench attacks in H1 2026

Home invasions were the most common crypto “wrench” attack in H1 2026, rising to 20 publicly reported incidents from one in H1 2025, CertiK reported.

Blockchain security firm CertiK verified 52 “wrench” attacks worldwide in the first half of 2026, up from 39 in the same period of 2025. Home invasions rose to 20 publicly reported incidents from one a year earlier. Kidnappings increased to 16 from 12, while robberies fell to one from five. CertiK estimated recorded financial exposure tied to the attacks at about $124.1 million in H1 2026, compared with $10.5 million in H1 2025. That exposure figure includes ransom demands, victim transfers, frozen or recovered assets and failed ransom attempts and is not limited to confirmed thefts.\n\nGeographically, Europe accounted for 39 of the 52 verified cases, with France reporting 33 incidents. CertiK applied a narrow methodology, counting only incidents that were publicly reported and independently verifiable. French authorities recorded 77 crypto-linked kidnappings, extortion or attempted extortion cases in H1 2026, up from 45 for the whole of 2025, and reported that emergency measures resulted in 200 arrests.\n\nWrench attacks involve criminals forcing victims at gunpoint or under threat to transfer private keys, passwords or crypto devices. CertiK noted the increase in home invasions as an example of criminals using physical coercion against holders who self-custody assets. The firm added the concentration of incidents in France may be linked to a more visible crypto ecosystem and data that connects identities and home addresses to perceived crypto wealth.\n\nTo reduce the risk of coerced transfers, CertiK recommended moving away from single-signer custody. Suggested protections include multisignature or multiparty computation arrangements, withdrawal delays, spending limits and geographically separated signers so one threatened person cannot release all assets immediately.\n\nIn response to the spike, French authorities launched a prevention platform and a rapid-alert system for crypto holders and professionals to improve reporting and warn potential victims while law enforcement pursues arrests and investigations.

The material on GNcrypto is intended solely for informational use and must not be regarded as financial advice. We make every effort to keep the content accurate and current, but we cannot warrant its precision, completeness, or reliability. GNcrypto does not take responsibility for any mistakes, omissions, or financial losses resulting from reliance on this information. Any actions you take based on this content are done at your own risk. Always conduct independent research and seek guidance from a qualified specialist. For further details, please review our Terms, Privacy Policy and Disclaimers.

Articles by this author