Physical extortion targeting crypto holders has exploded into a major threat vector. CertiK reports that "wrench attacks" generated over $100 million in losses during the first four months of 2026 alone. These attacks bypass digital security entirely, using kidnapping, assault, and threats to force victims to unlock wallets and transfer assets.
The term "wrench attack" references the blunt-force method. Criminals identify high-net-worth crypto holders through on-chain analysis, social media footprints, or insider tips, then physically coerce them into surrendering private keys or seed phrases. Unlike hacks that target protocol vulnerabilities, these attacks target the human element with maximum efficiency. A victim with $5 million in accessible crypto faces immediate loss if threatened with violence.
The uptick reflects a strategic shift in criminal targeting. Securing wallets with robust encryption and multi-signature schemes proves pointless if an attacker can simply threaten a founder or investor into compliance. High-profile victims have included crypto entrepreneurs kidnapped for ransom, though many cases go unreported due to stigma and fear of further targeting.
Geographic hotspots include countries with weak law enforcement and high crypto adoption. Latin America, parts of Asia, and Eastern Europe report concentrated clusters of these crimes. Organized crime groups have begun specializing in crypto extortion, treating it as a scalable operation. They use public blockchain data to identify targets holding substantial assets, then coordinate physical surveillance and abduction.
Security responses remain limited. Hardware wallets and offline storage offer some protection, but dedicated attackers willing to use violence can compromise even sophisticated setups through coercion. Some high-net-worth holders now employ private security details, operate multi-signature schemes requiring geographically dispersed co-signers, and deliberately obscure their holdings on-chain.
Law enforcement agencies have begun tracking these crimes more seriously as reported losses mount, but cross-border coordination remains weak. The rise of physical crypto theft marks a sobering reality: digital security means little when criminals can simply reach for a wrench instead of an exploit.