According to a report by Chainalysis, attackers extracted over $30 million in crypto using physical violence during the first half of 2026. Researchers noted that if this trajectory holds through H2, 2026 will shatter the 2025 record of $58 million.
When factoring in failed extortion attempts, coerced transfers that got blocked, and frozen funds, the broader threat scope is massive: roughly $316 million in 2024, $180 million in 2025, and $107 million so far in 2026.
Shifting meta
The playbook for so-called "wrench attacks" is rapidly evolving. While criminals previously favored complex, high-effort abductions, home invasions spiked to 37% of all violent incidents through mid-2026, up from just 14% a year prior. Meanwhile, full-blown kidnappings still account for 52% of cases.
"Home invasions allow attackers to confront victims in a controlled environment and compel an immediate transfer of funds," Chainalysis explained.
France has unexpectedly emerged as the global epicenter for this trend, outpacing the US, Brazil, and Thailand. Prior to 2025, France recorded only a handful of cases; that number jumped to 19 in 2025, and has already hit 30 publicly confirmed incidents by mid-2026.
French Interior Minister Laurent Nuñez confirmed that law enforcement agencies have logged over 70 violent incidents linked to crypto across the country.
A major insider data breach triggered France’s violent crime spree. Back in 2024, a Parisian tax official allegedly stole and sold dossiers on high-net-worth crypto holders directly to criminal syndicates.
A separate January breach at crypto tax platform Waltio exposed another 50,000 users, handing criminals an easy target list. In response, France's specialized organized crime unit, JUNALCO, spearheaded a massive crackdown resulting in roughly 200 arrests and 88 indictments.
Who's the target?
Law enforcement officials are highlighting a dangerous shift in target selection. While early attacks targeted crypto holders directly, roughly 30% of violent incidents in 2026 now target family members and close associates to force a transfer.
In France, that figure topped 40%. Furthermore, 93% of victims in France were local residents rather than tourists, indicating that attackers conduct thorough, intelligence-driven reconnaissance through social media footprints and leaked tax databases before striking.
This post is for informational purposes only and does not constitute advertising or investment advice. Please do your own research before making any decisions.
