Wrench attacks surge to $124M crypto losses

TLDR

Physical wrench attacks on crypto holders have surged, with roughly $124 million in losses reported in the first half of 2026.

1. CertiK counted 52 verified wrench attacks worldwide in H1 2026, with financial exposure jumping from about $10.5 million to $124.1 million year over year.
2. Europe, especially France, is the hotspot, and home invasions tied to crypto have risen sharply, fitting into a broader shift toward social and physical attack vectors.
3. Custody design now matters for personal safety: multi-party approvals, withdrawal delays, and strict operational security can meaningfully reduce the damage from coercion-style thefts.

Deep Dive

1. Scale Of Losses

Wrench attacks are physical assaults or threats aimed at forcing someone to hand over their crypto, typically by unlocking a hardware wallet or signing a transaction under duress.

CertiKs H1 2026 wrench attacks report recorded 52 verified incidents and estimated financial exposure of about $124.1 million, up from roughly $10.5 million a year earlier, with average loss per attack rising from $270,000 to about $2.39 million (CertiK H1 2026 report).

The firm stresses that these figures cover only publicly verified cases and known loss amounts, so true global losses are likely higher due to underreporting.

2. Regional And Trend Context

The spike is heavily concentrated in Western Europe: CertiK attributes 39 of the 52 global cases to Europe and 33 to France alone, where an active crypto community and detailed public reporting make high-net-worth holders easier to identify.

Home invasions linked to wrench attacks jumped from one case in H1 2025 to 20 in H1 2026, indicating that some criminals are now targeting people at home rather than relying purely on digital scams (CryptoBriefing summary).

In parallel, OKXs Web3 security report for H1 2026 found 182 security incidents with total crypto losses down about 60 percent, as attackers shifted from giant smart-contract exploits toward operational failures, social engineering, single points of control, and AI-assisted attacks (OKX Web3 security report).

3. Reducing Wrench-Attack Risk

Technical wallet security alone cannot stop an attacker who is willing to use force, so the key is to make coercion less profitable and slower to execute.

CertiK recommends custody setups where one person cannot move large amounts instantly: multi-party transaction approvals, hard limits on transaction size, and withdrawal delays that create time for incident response.

Operational security also matters: avoid publicly linking your identity to large holdings, separate spending wallets from long-term storage, and use institutional or shared custody for amounts you would not be willing to physically defend.

Conclusion

Wrench attacks highlight that real-world violence is now a measurable part of crypto risk, with verified losses in the tens of millions and rising concentration in specific regions.

For everyday users, the takeaway is not to avoid self-custody entirely, but to treat wallet design, transaction limits, and personal privacy as core parts of a security plan aimed at protecting both assets and people.