By Why Are Physical Attacks on Crypto Holders Rising?
According to Chainalysis, criminals stole more than $30 million through physical attacks on cryptocurrency holders during the first half of 2026, putting the year on course to exceed the record $58 million the firm recorded throughout 2025.
Chainalysis documented 46 violent crypto-related incidents worldwide through late June, up from 40 during the same period last year. The cases included kidnappings, home invasions, hostage situations and forced transfers, collectively known as wrench attacks.
The growing number of incidents expands the security risks facing crypto investors beyond hacked wallets, phishing attempts and exchange failures. Holders can now be targeted through their homes, relatives and personal information, particularly when criminals know where they live and how much cryptocurrency they may control.
According to Chainalysis, only 12 of the 46 documented attacks resulted in a payment, giving criminals a 26% success rate. The firm said that was down from 49% in 2025 and 67% in 2024. Even so, the higher number of attempts means total losses remain on pace to set another annual record.
Chainalysis said the known cases probably understate the problem because victims may avoid reporting incidents due to fear, privacy concerns or uncertainty over whether stolen funds can be recovered.
Why Has France Become the Main Hotspot?
France recorded 30 publicly known incidents by midyear, compared with 19 during all of 2025. French authorities have counted more than 70 cases, suggesting the actual number is far higher than publicly documented reports.
Interior Minister Laurent Nuñez said authorities had recorded 77 kidnappings, extortions or attempted extortions during the first half of the year, up from 45 throughout 2025. The government has responded with a rapid-alert and protection system, alongside closer intelligence-sharing with cryptocurrency companies.
The attacks have spread beyond Paris into cities including Strasbourg, Marseille, Grenoble, Toulouse and Nantes, as well as smaller communities that had rarely experienced crypto-related violence.
Chainalysis identified compromised personal data as the most likely cause of the increase. A French tax official allegedly accessed and sold records containing information about crypto investors, including names, addresses, phone numbers, tax details and estimated holdings.
A separate breach at crypto tax-reporting company Waltio reportedly exposed data belonging to about 50,000 users. The combination of leaked financial records and home addresses may have given criminal groups a ready-made list of potential targets.
Investor Takeaway
Crypto security no longer ends with cold wallets and private keys. Holders also need to limit public exposure, protect personal data and consider whether anyone outside a trusted circle knows the size or location of their assets.
Why Are Criminals Targeting Families and Homes?
Attackers are increasingly targeting relatives and acquaintances rather than approaching the crypto holder directly. Family members or other close contacts accounted for roughly 25% to 30% of global incidents by early 2026, up from almost none in 2021.
The pattern was even more severe in France, where relatives or acquaintances were targeted in more than 40% of known cases. Criminals may view family members as softer targets who can be used to pressure holders into transferring funds quickly.
Home invasions accounted for 37% of incidents in 2026, up from 26% in 2023, while kidnappings accounted for 53% of the funds lost. Because those figures measure different things, they should not be read as shares of the same total.
Chainalysis found that most victims were local residents rather than tourists. Local residents accounted for 93% of documented French cases, 82% in Brazil and 77% in the United States. That pattern points to advance research and surveillance rather than random attacks.
Chainalysis described the criminal process as one in which the “tradecraft tends to be amateur at the point of violence, but professional at both ends.” Victims are often selected through data leaks, social media activity or insider information before less experienced crews carry out the physical assault.
What Happens After Stolen Crypto Moves Onchain?
The movement of stolen funds showed widely different levels of technical skill. Some attackers transferred assets directly to centralized exchanges without attempting to conceal their origin, making the funds easier for investigators and compliance teams to trace.
More experienced groups used decentralized exchanges, bridges, cross-chain tools and laundering services to break the transaction trail. The most advanced cases showed links to larger criminal organizations rather than isolated local crews.
In one case, stolen funds passed through an instant exchange before reaching a suspected laundering service connected to cartel networks, terrorist-financing clusters and wallets associated with an alleged cocaine trafficker.
The lower success rate may indicate that law enforcement, exchanges and victims are becoming better at blocking transfers or freezing funds. It may also reflect a larger number of poorly planned attacks in France, where criminals appear to be acting on leaked target lists without the preparation seen in earlier cases.
For investors, the main lesson is that onchain wealth can create an offchain security problem. Public discussion of holdings, visible luxury purchases, leaked customer records and weak privacy controls can turn digital assets into a direct risk for holders and their families.