TL;DR
- Chainalysis documented 46 physical attacks against cryptocurrency holders in the first half of 2026, with a total of more than $30 million stolen.
- Only 12 of the 46 attacks actually resulted in a payment, representing a success rate of 26%, down from 49% recorded in 2025.
- France accounts for the highest number of incidents: local authorities counted more than 70 cases, driven by tax data leaks.
The so-called “wrench attacks” —physical attacks against cryptocurrency holders that include kidnappings, home invasions and hostage-taking— exceeded $30 million stolen in the first half of 2026, according to a report by Chainalysis. If the current pace holds, the year could surpass the record of $58 million stolen throughout all of 2025.
The blockchain analytics firm recorded 46 violent incidents linked to cryptocurrencies globally through the end of June, up from 40 in the same period the previous year. The data points to a consistent escalation of a criminal method that no longer limits itself to breaching digital wallets, but puts the physical safety of holders, their homes and their families at risk.
While most crypto crime unfolds online, physical violence against holders is accelerating. With $30M already stolen in 2026, "wrench attacks" and home invasions are on pace for a record year, with France emerging as the primary global hotspot. Read our new research for a… pic.twitter.com/ilJiOyJtLy
— Chainalysis (@chainalysis) August 6, 2026
Chainalysis Addresses the Patterns of Physical Crypto Crime
The Chainalysis report identifies an operational pattern that combines sophistication at the planning stages with blunt execution on the ground. Criminals identify their victims through data leaks, social media and insider information, and then send low-skilled groups to carry out the attack. Only 26% of attempts ended in an effective payment, a significant drop from the 49% success rate recorded in 2025. Chainalysis warns that the known figures likely underestimate the true scale of the problem, given that many cases go unreported.
France Is the Epicenter of Attacks
France is the most affected country. Chainalysis counted 30 publicly known incidents through mid-year, whereas all of 2025 had recorded 19. Interior Minister Laurent Nuñez raised that figure to 77 kidnappings, extortions or extortion attempts in the first half of the year, compared to the 45 recorded during the entire previous year. The government responded with a rapid alert system, greater protection for those affected and improved coordination with the crypto industry.
The main factor behind the increase would be the alleged misuse of French tax records. An official reportedly accessed and sold information on cryptocurrency investors to criminal organizations. That was compounded by a breach at the tax filing platform Waltio, which exposed the data of approximately 50,000 users.
Regarding the movement of stolen funds, the report detected varying levels of sophistication: from attackers who sent assets directly to centralized exchanges, to operations that used bridges, decentralized exchanges and laundering services. The most advanced cases showed ties to larger criminal networks.
