Physically targeting crypto users or their relatives — “wrench attacks” — rose sharply in 2025, according to blockchain security auditor CertiK. In a report released Sunday, CertiK said there were 72 verified wrench-attack cases worldwide in 2025, a roughly 75% increase over 2024, and described physical assaults and kidnappings as “no longer edge cases.”
CertiK recorded $40.9 million in confirmed losses from wrench attacks in 2025, while noting the true total may be higher because of under-reporting, silent settlements, and untraceable ransoms. France had the most confirmed incidents (19), and Europe as a whole accounted for about 40% of global cases.
“Beyond direct losses, the psychological and reputational fallout is reshaping behavior across the industry, pushing founders and high-net-worth individuals toward operational anonymity and geographical relocation,” CertiK said, calling 2025 a clear inflection point where physical violence has become a core threat vector in crypto.
High-profile 2025 incidents include the kidnapping and ransom of Ledger founder David Balland and his wife, Amandine, in January, and an Italian crypto holder who was reportedly kidnapped and tortured during a visit to New York City in May. SatoshiLabs founder Alena Vranova warned that kidnappings and extortion are frequent: “We have seen cases of kidnappings for as little as $6,000 worth of crypto, and we have seen people murdered for $50,000 in crypto.”
Proposed defenses include “panic wallets” that can call for help, wipe balances under duress, or send decoy funds. Experts also advise crypto holders to avoid openly discussing their wealth or holdings and to adopt stronger physical security and operational anonymity measures.
