In brief
- Chainalysis estimates more than $30 million has been stolen in violent crypto attacks during the first half of 2026.
- Home invasions now account for 37% of documented incidents, while France has recorded the most publicly known attacks.
- The firm says attackers increasingly target family members and use a range of laundering techniques to move stolen funds.
Physical attacks targeting cryptocurrency holders are on pace for their worst year on record, with more than $30 million stolen during the first half of 2026, according to a report by blockchain analytics firm Chainalysis.
In a new report published on Thursday, Chainalysis documented 46 violent crypto attacks through late June, estimating that victims lost more than $30 million in attacks.
“Violent attacks targeting crypto holders, including home invasions, kidnappings, and hostage situations, sometimes called 'wrench attacks’ in security circles, have surged in recent years,” Chainalysis wrote. “Criminals have recognized that crypto holders are high-value targets because they possess wealth in an instantly and irreversibly transferrable form.”
A wrench attack refers to the use of threats or physical violence to force victims to hand over cryptocurrency.
While kidnappings remain the most common type of attack, home invasions have become more frequent, rising to 37% of documented incidents from 26% in 2023. Chainalysis also found attackers are increasingly targeting relatives and acquaintances to pressure victims into transferring crypto.
“Home invasions allow criminals to confront victims in a controlled environment where they can compel a transfer of funds,” Chainalysis wrote. “Kidnappings, by contrast, are much more difficult to execute. Attackers must expend considerable time and resources planning logistics; and the extended periods spent with victims leaves the attacker exposed for longer.”
France has become a major center of wrench attacks, recording 30 incidents through mid-2026, more than any other country. Chainalysis said the increase appears to be linked to an alleged breach involving tax records that exposed information about high-net-worth crypto holders.
The report also found wide differences in how attackers handle stolen funds. While some attackers appear to have only a basic understanding of cryptocurrency, moving stolen funds directly to centralized exchanges without attempting to hide their trail, others use far more sophisticated methods to obscure where the money goes.
