Blockchain security firm CertiK reported on Thursday that home invasions became the most common form of crypto wrench attacks during the first half of 2026, rising to 20 publicly reported incidents from just one a year earlier. CertiK verified 52 wrench attacks worldwide in H1 2026, up 33.3% from 39 incidents during the same period in 2025, with recorded financial exposure reaching about $124.1 million compared to $10.5 million a year earlier. The increase in home invasions suggests criminals are increasingly bypassing digital safeguards by physically coercing crypto holders and their families.
CertiK Reports 52 Wrench Attacks in H1 2026
CertiK said it verified 52 wrench attacks worldwide in the first half of 2026, up 33.3% from 39 incidents during the same period in 2025. Kidnappings rose to 16 from 12, while robberies declined from five incidents to one.
The recorded financial exposure linked to the attacks reached about $124.1 million, up from $10.5 million a year earlier. CertiK noted the figure is not limited to confirmed thefts and may include ransom demands, victim transfers, frozen or recovered assets and failed ransom demands.
![]()
Attack type year-on-year, H1 2025 vs H1 2026. Source: CertiK
France Accounts for 33 of 52 Verified Incidents
Europe accounted for 39 of the 52 verified incidents, while France alone accounted for 33, or nearly two-thirds of the global total. CertiK said it used a narrower methodology than French authorities, counting only publicly reported incidents it could independently verify.
On July 2, French Interior Minister Laurent Nuñez said authorities had recorded 77 crypto-linked kidnappings, extortion cases or attempted extortion cases during the first half of 2026, up from 45 in the entire year of 2025.
![]()
Share of wrench attacks by region. Source: CertiK
CertiK said the concentration may reflect France's more visible crypto ecosystem, with data breaches and information connecting identities and home addresses with perceived crypto wealth.
French Authorities Launch Prevention Platform and Make 200 Arrests
French authorities launched a dedicated prevention platform and a rapid-alert system for crypto holders and professionals. Interior Minister Nuñez said that emergency measures have resulted in 200 arrests.
CertiK Recommends Multisignature Security Arrangements
CertiK said the rise in physical coercion challenges conventional self-custody advice. The company recommended multisignature or multiparty computation arrangements, withdrawal delays, spending limits and geographically separated signers so one threatened person cannot immediately release all available assets.
FAQ
What did CertiK report about crypto wrench attacks in H1 2026?
CertiK reported on Thursday that it verified 52 wrench attacks worldwide in the first half of 2026, up 33.3% from 39 incidents during the same period in 2025. Home invasions became the most common form, rising to 20 publicly reported incidents from just one a year earlier. The recorded financial exposure reached about $124.1 million, up from $10.5 million a year earlier.
How many crypto wrench attack incidents did France account for in H1 2026?
France accounted for 33 of the 52 verified incidents globally, representing nearly two-thirds of the total. French Interior Minister Laurent Nuñez said on July 2 that authorities had recorded 77 crypto-linked kidnappings, extortion cases or attempted extortion cases during the first half of 2026, up from 45 in the entire year of 2025.
What security measures did CertiK recommend in response to rising physical attacks?
CertiK recommended multisignature or multiparty computation arrangements, withdrawal delays, spending limits and geographically separated signers so one threatened person cannot immediately release all available assets. The company said the rise in physical coercion challenges conventional self-custody advice.
