More than $30 million in cryptocurrency has been stolen through violent attacks targeting crypto holders in the first half of 2026, putting the year on track to surpass the record $58 million stolen through similar attacks in 2025, according to Chainalysis.
The blockchain analytics firm documented 46 violent crypto related incidents globally through late June. The attacks, commonly described as “wrench attacks,” include kidnappings, home invasions and hostage situations in which criminals use physical force or threats to compel victims to transfer digital assets. The findings show that crypto security risks are extending beyond hacks and online fraud as criminals increasingly target the people behind valuable wallets.
Key Takeaways
- More than $30 million was stolen through violent crypto attacks in the first half of 2026.
- Chainalysis recorded 46 incidents through late June, with only 12 resulting in successful payments.
- France recorded 30 publicly known incidents, making it the leading hotspot in the firm’s dataset.
- Home invasions accounted for 37% of attacks in 2026, while kidnappings represented 52%.
- Family members and acquaintances are increasingly being targeted as criminals seek leverage over crypto holders.
- The attack success rate fell to 26% in 2026 from 49% in 2025 and 67% in 2024.
France Becomes the Main Hotspot
France has experienced the sharpest increase in violent crypto attacks. Chainalysis recorded 19 incidents in the country during 2025, but that figure had already risen to 30 by mid 2026. French authorities have reported an even higher number of cases. Interior Minister Laurent Nuñez said authorities had documented more than 70 crypto related violent incidents, prompting the government to strengthen protections for people considered at risk.
Chainalysis links much of the increase to compromised personal information. A French tax official was allegedly involved in stealing and selling dossiers containing information about high net worth crypto holders, including names, addresses, phone numbers and holdings.
A separate breach disclosed by crypto tax reporting company Waltio in January 2026 reportedly exposed information belonging to around 50,000 users. The combination of financial information and personal details can give criminals a direct way to identify potential targets.
Chainalysis Head of Research Eric Jardine said sensitive databases remain attractive targets for criminals.
“Any time a central repository collects valuable, exploitable intelligence, illicit actors will seek to attempt a breach.”
The pace of attacks in France has also accelerated, rising from roughly 1.9 incidents per month in 2025 to about 4.6 per month during the first half of 2026.
Criminals Increasingly Target Homes and Families
The nature of wrench attacks is changing alongside the increase in incidents. Home invasions represented 37% of documented attacks in 2026, compared with 14% in 2025. Kidnappings remained the largest category at 52%.
Criminals are also increasingly targeting relatives and acquaintances instead of going directly after the crypto holder. Chainalysis found that family members or close associates accounted for roughly 25% to 30% of incidents globally by early 2026. In France, the figure exceeded 40%. The pattern suggests that attackers are using information about a holder’s personal network to create additional pressure.
Despite the increase in attacks, criminals are succeeding less frequently. Only 12 of the 46 documented incidents resulted in a payment, producing a 26% success rate. That compares with 49% in 2025 and 67% in 2024. Chainalysis attributed the decline partly to a larger number of less targeted attacks, particularly in France.
Stolen Crypto Leaves an Onchain Trail
Once attackers obtain cryptocurrency, their ability to move the funds quickly does not necessarily make them impossible to trace.
Chainalysis identified different levels of sophistication among attackers. Some criminals send stolen assets directly to centralized exchanges, leaving a relatively straightforward transaction trail. More experienced groups use decentralized exchanges, bridges and cross chain tools to make tracing and recovery more difficult.
At the most sophisticated end, some attackers appear connected to broader criminal networks. In one case examined by Chainalysis, stolen funds moved through an instant exchange and into a suspected laundering service with links to cartel money laundering networks, terrorist financing clusters and wallets associated with an alleged cocaine trafficker.
The firm’s analysis shows that physical attacks can therefore connect directly to established cryptocurrency laundering infrastructure.
Crypto Holders Face a Broader Security Risk
The rise in wrench attacks highlights a security problem that cannot be solved through wallet security alone. A private key may be protected by strong encryption, but criminals can instead target the person who controls it. Publicly disclosing cryptocurrency holdings, linking identifiable wallets to personal information or allowing sensitive financial records to become exposed can increase the risk of physical targeting.
The trend also creates a challenge for regulators, exchanges and law enforcement. Blockchain transactions provide investigators with a traceable record after a theft, but preventing the physical attack requires cooperation between crypto companies, data custodians and traditional law enforcement agencies.
Conclusion
Chainalysis’ data show that violent crypto crime is becoming a more significant threat as criminals find new ways to identify and pressure wealthy holders. More than $30 million has already been stolen in 2026, and the year’s total could exceed the $58 million record set in 2025 if attacks continue at the current pace. France’s sharp increase is particularly significant, with compromised personal data appearing to give criminals access to a larger pool of potential targets. Meanwhile, the growing use of family members and increasingly sophisticated laundering methods shows that the threat extends well beyond individual wallet security.
For crypto holders, protecting private keys is only part of the equation. Limiting exposure of personal information and cryptocurrency wealth is becoming an equally important part of protecting digital assets.
