France is witnessing an alarming increase in kidnappings and home invasions linked to cryptocurrency, known as ‘wrench attacks.’ This trend has been particularly noticeable during a major international blockchain and crypto conference held recently. VIP attendees were escorted by police motorcades to events such as the dinner at Versailles Palace, highlighting heightened security concerns. The Carrousel du Louvre, where the conference took place, also saw reinforced security measures.
The issue has drawn significant attention, prompting French government officials to address it publicly during the Paris event. They reported that France alone has experienced 41 crypto-related kidnappings and home invasions this year, averaging one incident every two to three days. Jean-Didier Berger, Minister Delegate at the Interior Ministry, announced upcoming measures in collaboration with Interior Minister Laurent Nuñez to combat these incidents. Despite a prevention platform garnering thousands of registrations, further actions are deemed necessary as attacks continue.
France has become central to the global surge in wrench attacks, which involve physical force to gain access to digital assets. These assaults are becoming more frequent and violent worldwide. According to data from security researcher Jameson Lopp and Certik, there were 72 verified incidents globally in 2025, marking a 75% increase from the previous year out of 188 total attacks tracked since 2014. Many cases go unreported, he noted. Physical assaults increased by 250% year-over-year.
Jameson Lopp explained that successful wrench attacks signal to criminals that crypto owners are lucrative targets, given that crypto transactions can’t be reversed once authorized under duress.
The method of identifying victims has evolved from searching for digital wallets to targeting individuals. Phil Ariss of TRM Labs highlighted this shift, noting attackers now use social media, public activities, and leaked data to profile potential targets. He warned against closely associating real-world identities with visible crypto assets.
The situation is worsened by insider involvement, as seen in a case where French tax officials sold sensitive information to attackers. The victim pool has expanded, with mid-level holders and even families becoming targets. In January 2025, Ledger co-founder David Balland was kidnapped in France; his finger was severed as part of a ransom demand until he was rescued.
Some attacks involve prolonged captivity or torture, such as a New York case where a crypto investor was held for over two weeks, and a Canadian incident involving severe violence. Lopp noted both opportunistic and organized groups are involved, with increasing signs of coordination among attackers.
Once funds are seized, they’re quickly moved and often converted into stablecoins across multiple chains to hinder recovery efforts. France’s prominence in these attacks may be due to leaked personal data and international criminal networks, according to Lopp. Rising asset values and enhanced digital security have made crypto targets more attractive than traditional bank robberies.
Underreporting is an issue; many wrench attacks are recorded as ordinary crimes without mentioning the crypto aspect, complicating case connections for authorities. This has sparked discussions on the risks associated with self-custody in cryptocurrencies.
To mitigate these threats, experts recommend multi-signature setups and withdrawal delays to limit immediate fund access during coercion attempts. These measures may deter attackers by altering the risk-reward dynamic. As crypto adoption increases, wrench attacks pose a growing and severe security threat.