- CertiK recorded 52 verified wrench attacks in H1 2026 with $124.1M in losses, up 33.3% YOY.
- Personal data breaches helped target crypto holders, with global home invasions rising from 1 to 20.
- France recorded 33 of 52 global crypto-related kidnapping incidents, the highest worldwide.
On July 23, 2026, CertiK released its Intel3D Wrench Attacks Report for the first half of 2026 (H1 2026), revealing a sharp rise in physical crypto attacks, with 52 verified wrench attacks and $124.1 million in losses, as the threat became increasingly concentrated in Western Europe.
CertiK H1 2026: Global Crypto Wrench Attack Trends
In H1 2026, physical coercion attacks against crypto-holders, commonly referred to as “wrench attacks,” transitioned from a niche threat to a focused, high-stakes attack. According to CertiK’s report, researchers recorded 52 verified incidents worldwide. This represents a 33.3% rise compared with the 39 verified cases in H1 2025.
Meanwhile, financial losses were approximately $124.1M, up 11.8 times from $10.5M in 2025. This includes ransom payments, successful steals, victim moves, frozen or retrieved assets, and failed attempts, and represents a larger picture of attempted extractions.
How Data Breaches Enabled Targeted Home Invasions
The surge in crypto-related home invasions in H1 2026 was driven by the growing availability of personal data that enabled criminals to identify and target high-value crypto holders. Home invasions jumped from 1 to 20 incidents, and kidnappings increased from 12 to 16.
According to the report, attackers increasingly adopted more sophisticated data-driven targeting, proxy and family coercion, and organized transnational models, instead of opportunistic street attacks. This shift coincided with a sharp decline in traditional street robberies, which declined from 5 to 1.
Geographically, the incidents were heavily concentrated in Europe, with 39 of the 52 recorded incidents. France emerged as the clear epicenter with 33 incidents, nearly two-thirds of the global total. French authorities reported 77 cases of crypto-linked kidnappings, extortions, or attempted cases, compared to 45 for all of 2025.
What’s Next for Crypto Wrench Attacks in H2 2026?
The outlook for H2 2026 will depend on the balance between stronger enforcement, evolving criminal tactics, and rising market visibility. If the first-half pace continues, verified incidents could approach 100 by year-end, with recorded exposure exceeding $228M.
Europe could see renewed acceleration, especially around conferences, market rallies, or further data-leak revelations. Criminal organizations may also adapt and move outside of France to less equipped jurisdictions. Attackers will be more likely to use proxy victims, such as relatives, employees, drivers, and assistants, to put pressure on targets.
Furthermore, connecting database identities, home addresses, and crypto wealth could become a valuable commodity in the underground market. More than Bitcoin’s price, the visibility of holders will continue to shape future attack trends.
Related: France Vows Tougher Crackdown as Crypto Wrench Attacks Surge to 77 in H1 2026
Disclaimer: The information presented in this article is for informational and educational purposes only. The article does not constitute financial advice or advice of any kind. Coin Edition is not responsible for any losses incurred as a result of the utilization of content, products, or services mentioned. Readers are advised to exercise caution before taking any action related to the company.
