What Is a Wrench Attack in Crypto? The Growing Threat of Violence Against Holders

Lost money to a crypto or trading scam? Read this first:

If your losses exceed £3,000 (in the UK) or $10,000 worldwide The Crypto Adviser can offer advice on recovering your funds. 

>> GET IN TOUCH

Table of Contents

• Crypto Criminals Turn To Violence
• What Is A Wrench Attack?
• Why Crypto Holders Are Being Targeted
• How Wrench Attacks Work
• The Rise Of Crypto Kidnappings
• Are Wrench Attacks Increasing?
• Why Traditional Crypto Security Fails
• How To Protect Against Wrench Attacks
• Wrench Attack Case Studies
• Final Word

Crypto Criminals Turn To Violence

When people imagine crypto crime they usually think of online scams or romance scams where crypto holders are tricked into handing over their funds or giving out the private keys to their wallet.

There’s a raft of terms that many people will be familiar with, including phishing, exchange hacks, malware, smart-contract exploits, romance scams and pig-butchering scams.

Now though a growing number of people are falling victim to what’s known as a ‘wrench attack’  (sometimes called a ‘$5 wrench attack) – a disturbing trend which involves physical attacks on crypto investors.

Here, we look at the growing threat of this type of crypto crime in which criminals are finding it’s easier to threaten a person in real life rather than try to defeat the cryptography protecting crypto funds.

What Is A Wrench Attack?

A wrench attack is where criminals use physical force or the threat of violence to force a crypto holder to hand over their Bitcoin or other cryptocurrencies, either by revealing their private keys or seed phrase, or by directly transferring the coins to a wallet controlled by the criminals.

There have been a growing number of high-profile cases where victims have been kidnapped and forced into giving up their Bitcoin or other coins, sometimes with dire consequences even after the funds were handed over.

The term wrench attack originates from a satirical XKCD webcomic called ‘Security’ which was published in 2009. It depicts a scene where a character claims they can use maths to crack a laptop’s password, but ultimately an individual is physically forced to reveal their login details.

In a nutshell, instead of using complex cryptographic attacks that require highly specialised knowledge and may take a long time, hitting someone with a cheap wrench until they give up their password is a lot quicker.

It also means that no matter how secure wallet technology or encryption may be, it cannot protect against a person being physically coerced into handing over their coins. It’s effectively a modern-day equivalent of a street mugging.

Why Crypto Holders Are Being Targeted

The nature of cryptocurrencies and the ease by which they can be transferred around the globe make them appealing to criminals.

There are several characteristics of crypto and blockchain technology that mean targeting crypto holders is more lucrative that other more traditional crimes.

For starters, crypto transactions generally can’t be reversed, unlike bank transfers, and there’s no support if you’re using a decentralised self-custody wallet.

A self-custody wallet is like becoming your own bank. There are many advantages to storing crypto this way, but there are risks involved as well.

Criminals capitalise on the fact that access to a self-custody wallet depends entirely on a private key or recovery phrase known only to the wallet owner. Anyone who can get hold of this can drain the wallet.

Additionally, sophisticated crooks have used publicly available blockchain data combined with social media activity and leaked databases to identify wealthy crypto holders to target.

The rewards can be high and immediate. A successful wrench attack can potentially net millions in crypto within minutes.

While it’s possible to trace the initial transactions involved in the theft, criminals use a variety of methods, including crypto mixers, to cover their tracks.

How Wrench Attacks Work

Looking at some of the high-profile cases that have been reported in the media it’s clear that wrench attacks are rarely spontaneous.

Thefts are usually targeted and well planned in advance, with the victims usually people who hold substantial amounts of crypto.

That’s not to say there haven’t been any spontaneous thefts where a crypto wallet has been found during the course of another crime and the owner threatened with violence before giving up their seed phrase.

But mostly victims are what are called ‘whale’ investors or those with a significant profile online, such as crypto founders, influencers and traders.

Once a target has been identified, criminals gather open-source intelligence (sometimes referred to as OSINT) from a variety of sources, such as social media channels and blockchain activity.

The victim might then be monitored for several weeks before the criminals strike. This can be during a burglary or home invasion, armed robbery, kidnapping or street assaults.

Criminals have then been known to use extreme violence to extract wallet credentials from their target and in some cases this has resulted in the death of the victim.

This underlines the need for discretion if you hold a large amount of crypto, with flexing online a sure-fire way of drawing attention to yourself and potentially putting a target on your back.

The Rise Of Crypto Kidnappings

One particularly disturbing trend involving wrench attacks is the increase in crypto holders being kidnapped.

In some cases they have been confined and tortured and had family members threatened by the criminals in order to gain access to their wallets.

Attacks involving kidnapping have been reported across the globe, with several in Europe, North America and Asia.

In some instances attackers have posed as delivery drivers or waited outside homes or hotels before pouncing on their victims and taking them to another location.

It’s believed that several of these victims were chosen because their cryptocurrency holdings were publicly known due to their online activities.

Are Wrench Attacks Increasing?

All the evidence suggests that wrench attacks are becoming more common.

According to blockchain security firm CertiK, there were 72 wrench attacks around the world in 2025. This represented a 75% increase on the previous year.

In the first three months of 2026, CertiK reported 34 physical attacks on high profile crypto figures.

Recent studies have pointed to the trend continuing and experts have cautioned that the true figure might be much higher because many victims do not come forward to report the incidents due to privacy concerns, fear of retaliation and the potential for reputational damage.

Why Traditional Crypto Security Fails

Put simply, digital security and personal security are not the same thing which is why traditional crypto security fails in wrench attack incidents.

A crypto hardware wallet is virtually impossible to hack remotely, but these measures are meaningless if a victim is forced to reveal the access information under duress.

The growing trend of wrench attacks exposes a fundamental weakness in the cryptographical security offered by self-custody wallets.

How To Protect Against Wrench Attacks

Crypto holders can reduce the risk of wrench attacks by combining physical and technical security measures.

The most obvious thing to do is to avoid publicly discussing crypto holdings and avoiding any displays of wealth on social media, crypto or otherwise.

On the technical side, using multi-signature wallets that require multiple keys before the funds can be accessed can help.

A multi-sig wallet allows keys to be distributed across different people or locations meaning that criminals can’t gain immediate access to a wallet from a single victim.

Other methods include using a decoy wallet containing a limited amount of funds (although enough to satisfy a crook) while maintaining a separate wallet for larger holdings.

Time locked crypto vaults and delayed withdrawal mechanisms do exist on some wallets making immediate theft impossible so it’s worth check to see if this is an option.

High-net worth crypto holders should also consider beefing up their physical security, such as improving home alarm systems, creating secure storage locations and employing bodyguards while traveling around.

We’ve heard anecdotal reports that some security firms have seen an increase in demand from crypto investors seeking executive-level personal protection.

Wrench Attack Case Studies

One of the most high-profile recent cases of a wrench attack involved David Balland, the founder of Ledger, the popular crypto hardware wallet manufacturer.

Mr Balland was at his home in the French town of Vierzon when he was kidnapped along with his wife by a gang who demanded a $10million (£7.4m) ransom.

Ultimately the couple were rescued by French special forces but not before the kidnappers had cut off one of Mr Balland’s fingers.

This is just one incident among a wave of robberies that have involved extreme physical violence.

In another wrench attack in Vienna the victim had his teeth knocked out before giving up the keys to his crypto. He later died as a result of his injuries.

Recently in London a man was followed home and severely beaten by a gang who forced him to give up the £10,000 in crypto he held in his wallet.

Final Word

Wrench attacks present a new challenge for the crypto industry, especially as the increase likely results from improvements in cybersecurity and wallet technology.

It’s clear that they represent a growing threat that anyone who holds a significant amount of crypto should be aware of.

While conducting a security review is always useful, discretion regarding your crypto holdings has never been more important.

If you need help or advice about cryptocurrency please contact us today.