According to the latest report from blockchain security firm CertiK, there were 72 verified wrench attack incidents worldwide in 2025, marking a 75% surge compared to 2024.
This year, cryptocurrency holders suffered confirmed losses of up to $40.9 million due to physical attacks. The actual figure may be even higher, as many victims choose not to report incidents out of fear or because they reach private settlements.
01 Crisis Overview: 2025 Marks a Turning Point for Wrench Attacks
Crypto-related crime is showing a disturbing trend toward increased violence. Wrench attacks have evolved from rare edge cases into a structural risk, now representing a core threat within the cryptocurrency ecosystem.
CertiK’s report clearly states that 2025 marks a definitive turning point, with physical violence emerging as a central threat in the crypto space.
Data from the report reveals a 250% spike in direct physical assault cases among these attacks. The violence now targets not only individual cryptocurrency holders but also extends to their families and relatives, posing a broader threat to social safety.
Unlike traditional cyberattacks, wrench attacks bypass all digital security measures and exploit human physical vulnerabilities directly. The alarming aspect of this tactic is that, no matter how advanced a victim’s cryptographic protections or multi-factor authentication may be, they can be rendered useless in the face of violent coercion.
02 Geographic Distribution: Europe Becomes Epicenter, France Hit Hardest
The geographic distribution of wrench attacks shows a clear shift. Europe has become the global epicenter, accounting for over 40% of all such incidents in 2025—up from just 22% in 2024.
France stands out in this wave of crime. In 2025, there were 19 confirmed wrench attacks in France, surpassing the United States’ total of 8. According to the public wrench attack database maintained by Casa CTO Jameson Lopp, 7 out of 9 incidents recorded this year occurred in France.
Other parts of Europe are also facing serious challenges. Countries like Spain and Sweden are seeing a rise in organized crypto kidnapping groups. These criminal organizations increasingly target known cryptocurrency holders, using violence to seize their digital assets.
In stark contrast, the United States’ share of wrench attacks dropped from 36.6% in 2024 to just 12.5% in 2025.
Asia remains a high-risk region, accounting for 33.3% of wrench attack incidents. The main targets are crypto tourists and expatriates in hubs like Thailand and Hong Kong. This trend signals that attackers have shifted from focusing on Asia and North America to a broader global distribution.
03 Attack Methods: From Home Invasions to Sophisticated Criminal Networks
Wrench attack tactics continue to evolve, with criminals adopting increasingly diverse and professionalized strategies. The most common method is kidnapping, and physical assault cases have surged by 250%.
Criminals no longer limit themselves to targeting the victim alone. Home invasions are now a frequent tactic, with attackers sometimes breaking into victims’ residences or targeting spouses, children, or elderly parents to force cooperation.
A strategy known as the "honeypot trap" has also emerged, where attackers set up fake romantic relationships to orchestrate assaults. This form of social engineering shows that attackers are increasingly combining physical violence with psychological manipulation.
In a recent case disclosed by the US Department of Justice, a member of a criminal group broke into a victim’s home in New Mexico in July 2024, intending to steal a hardware crypto wallet. The burglary was coordinated in real time with accomplices remotely monitoring the victim’s physical location.
04 Underlying Causes: The "Technology Paradox" Between Digital and Physical Security
The surge in wrench attacks stems from what’s known as the "technology paradox": as digital security technologies become more robust, criminals shift their tactics toward physical violence.
With on-chain code becoming increasingly difficult to exploit, attackers are adapting by turning to more complex methods. When code is hard to breach, the human element becomes the primary attack surface.
The anonymity and irreversibility of cryptocurrency transactions give criminals confidence that, once funds are transferred, they’re difficult to trace and nearly impossible to recover.
Attackers also exploit the ease of gathering personal information. From home addresses to family details, it’s easier than ever to collect personal data online, allowing criminals to identify and track potential victims with minimal effort.
SatoshiLabs founder Alena Vranova noted in August that at least one Bitcoin holder is kidnapped, tortured, or extorted somewhere in the world every week—and sometimes faces even worse outcomes.
05 Personal Defense: From Decoy Wallets to Multi-Layered Security
In the face of growing wrench attack threats, individual crypto holders can take several defensive measures to reduce risk. Decoy wallets serve as an effective first line of defense, containing a plausible amount of funds that can be surrendered immediately if attacked.
Maintaining physical separation between mnemonic phrases and hardware wallets is a crucial strategy. Storing backups in a location different from the physical device can prevent attackers from gaining full access at once.
CertiK advises crypto holders to minimize their public crypto footprint and avoid sharing portfolio screenshots or wallet addresses. Flaunting crypto success on social media or public forums can inadvertently attract criminal attention.
For those at higher risk, multisignature wallet architectures provide added protection by requiring multiple approvals before any transaction can be executed, making coercion alone insufficient. Implementing 2-of-3 or 3-of-5 signature schemes is recommended.
Time-locked smart contracts offer another useful safeguard, enforcing mandatory delays on large withdrawals. Incorporating family security education into overall security planning is also essential, as family members are often targeted.
06 Industry Response: Emerging Solutions and Insurance Coverage
The crypto industry is actively developing solutions to counter wrench attacks, with the concept of an "emergency wallet" gaining significant attention. These wallets are designed to help users respond during physical attacks by discreetly alerting trusted contacts, emptying funds, delaying transactions, or redirecting attackers to decoy wallets.
Several leading companies have begun offering insurance products that specifically cover wrench attacks. Insurance giant Lloyd’s of London now provides coverage for clients against such incidents.
Crypto security firm Haven is developing a wallet with enhanced security features, including continuous biometric checks to ensure only the owner can send tokens, and geofencing to block transactions outside of home or work locations.
Notably, Gate, as an industry-leading exchange, always prioritizes user security. The platform not only offers advanced digital security measures but also actively researches comprehensive solutions to address emerging threats.
Blockchain intelligence platforms play a critical role in tracking stolen assets. Advanced blockchain analytics and attribution technologies from companies like TRM Labs help law enforcement and investigators trace fund flows, identify potential money laundering channels, and support efforts to bring criminals to justice.
Looking Ahead
Globally, law enforcement has recovered less than 5% of funds lost to wrench attacks. However, Gate’s real-time monitoring system has already successfully detected and prevented multiple suspicious tracking incidents targeting its users.
