- CertiK experts published a report on wrench attacks for the first six months of 2026.
- The number of incidents and the total amount of damage increased.
- Across jurisdictions, Europe leads overall, with France in particular at the top.
In the first half of 2026, 52 so-called wrench attacks on crypto entrepreneurs were recorded, according to a CertiK report. Among jurisdictions, Europe holds an undisputed lead.
As a reminder, a wrench attack is a physical assault on a person aimed at forcing them to hand over crypto assets or wallet access keys. There are many such cases, for example, in France.
Local authorities even launched a dedicated platform with a hotline specifically for crypto industry participants.
According to the CertiK report, 35 incidents were recorded in Q1 2026, compared with 22 a year earlier. In Q2 — 17.
Recorded losses in the first half of 2026 totaled $124 million, up 1,079% compared with the same period a year earlier.
The average insurance payout per incident rose from $270,000 to $2.39 million.
As CertiK noted, these figures reflect not only stolen funds, but also ransom, transfers made under duress, and other damage linked to the recorded attacks.
In addition, experts noted a certain shift in attackers’ behavior:
“The trend suggests that attackers increasingly believe physical coercion can deliver massive profits. This belief is changing the economics of crime. Even failed attacks can be rational for groups if the expected payoff is high enough, and organizers shift operational risks onto teams that can be deployed on the ground.”
Geography of Attacks
The report emphasizes that this metric has changed significantly. While in the first six months of 2025 Europe’s share of the total number of attacks was 35.9%, in 2026 it was 75%. Elsewhere, criminal activity declined.
Experts also noted unusually high criminal activity in France. The country accounted for 63.5% of all confirmed incidents recorded worldwide in the first half of 2026, and 84.6% of all attacks in Europe over the same period.
The organization explained the popularity of this jurisdiction by a number of factors. First and foremost, the large number of crypto companies and influential figures in the sector, as well as extensive documentation — including tax records — whose leakage often leads to attacks.
Attackers Adapt
According to the report, in the first half of 2026, home invasion and kidnapping became the most common types of attacks. Both methods require careful preparation and planning, including arranging the transfer and laundering of funds. This suggests that attacks on crypto entrepreneurs are becoming increasingly sophisticated and complex.
“The operating model is increasingly taking on a multi-layered structure. At the top are the organizers and sponsors, who set targets, buy or collect data, coordinate logistics, and oversee money laundering. Below them are local coordinators, who recruit teams, arrange transport or safe locations, and conduct direct surveillance. At the bottom are on-the-ground operators, often young people recruited via messaging apps or local criminal networks for a fixed fee,” the report says.
If the current pace of attacks holds, by the end of 2026 the number of incidents will likely reach 100, and the damage from them will exceed $228 million. However, there are many variables that could influence the trend.
Сообщение The Number of Physical Attacks on Crypto Entrepreneurs in 2026 Rose by More Than 33% появились сначала на INCRYPTED.