TechFlow News, May 9: According to a report by The Block, blockchain security firm CertiK released a report on May 8 stating that globally, 34 confirmed “wrench attacks” against cryptocurrency holders—defined as offline physical assaults and extortion targeting individuals holding crypto assets—occurred in the first four months of 2026, representing a 41% increase over the same period in 2025. Total losses incurred by victims amounted to approximately $101 million. If this trend continues, the annual number of such incidents is projected to reach around 130, with potential losses soaring into the hundreds of millions of dollars.
Geographically, 28 of the 34 incidents (82%) occurred in Europe, with France standing out particularly: 24 cases were recorded there in the first four months of 2026 alone—exceeding the total of 20 incidents reported across all of 2025. CertiK attributes this surge to France’s hosting of flagship crypto firms such as Ledger and Binance, frequent data breaches, and a widespread community culture of “flexing wealth” and proactive doxxing. In contrast, reported incidents in the United States dropped from nine in Q1 2025 to three in Q1 2026; in Asia, the figure fell from 25 to just two.
Regarding attack methodologies, CertiK notes that criminal groups have shifted toward a “data-driven targeting” model, purchasing victims’ names, addresses, and asset information from data brokers—thereby reducing the need for physical reconnaissance. This year, over half of the incidents involved threats or direct harm to victims’ family members—including spouses, children, and elderly parents—as coercive tactics. Operationally, small gangs of three to five individuals are typically recruited via Telegram or Snapchat, while masterminds often operate from Morocco, Dubai, and Eastern Europe. Common tactics include the “doorbell vector” (posing as delivery personnel or police officers at the victim’s doorstep) and “honey pots” (posing as business meetings or over-the-counter trades).




