2025 Wrench Attacks Surge by 75%: Is Violence Becoming the Core Threat to Crypto Holders?

According to the latest report from blockchain security firm CertiK, there were a total of 72 verified wrench attack incidents worldwide in 2025, a 75% surge compared to 2024.

This year, physical attacks confirmed to have caused losses of up to $40.9 million by cryptocurrency holders, and the actual number may be higher as many victims choose not to report out of fear or to settle privately.

01 Crisis Overview: 2025 Marks a Turning Point for Wrench Attacks

Cryptocurrency crime is showing an alarming trend of increasing violence. Wrench attacks have evolved from fringe cases to systemic risks, becoming a core threat that cannot be ignored within the crypto ecosystem.

CertiK explicitly states in its report that 2025 marks a clear turning point where physical violence becomes a central threat in the crypto space.

Data shows that the number of direct physical assault cases involving physical attacks has surged by 250%. These attacks target not only individual cryptocurrency holders but also their families and relatives, creating a broader social security threat.

Unlike traditional cyberattacks, wrench attacks bypass all digital security measures and directly target human physical vulnerabilities. The terrifying aspect of this attack method is that, regardless of how advanced the victim’s encryption technology or multi-factor authentication is, they can still be overpowered by violence.

02 Geographical Distribution: Europe Becomes the Epicenter of Attacks, France Leads

The geographical distribution of wrench attacks shows a clear shifting trend. Europe has become the global center for wrench attacks, accounting for over 40% of such incidents worldwide in 2025, up from just 22% in 2024.

France has taken a shocking position in this wave of crime. In 2025, France experienced 19 confirmed wrench attacks, surpassing the 8 incidents in the United States. The publicly maintained wrench attack database by security firm Casa’s CTO Jameson Lopp shows that seven out of nine recorded incidents this year occurred in France.

Other parts of Europe are also facing severe challenges. Countries like Spain and Sweden are seeing an increasing number of crypto hijacking organizations. These criminal groups are increasingly targeting known cryptocurrency holders, using violence to seize their digital assets.

In stark contrast, the US’s share of wrench attacks decreased from 36.6% in 2024 to 12.5% in 2025.

Asia remains a high-risk region, accounting for 33.3% of wrench attack incidents, mainly targeting crypto tourists and expatriates in hubs like Thailand and Hong Kong. This trend indicates that attackers’ target selection has shifted from early focus on Asia and North America to a broader global distribution.

03 Attack Methods: From Home Invasions to Sophisticated Violent Networks

The tactics of wrench attacks are constantly evolving, with criminals adopting increasingly diverse and professional strategies. The most common method is kidnapping, which has seen a 250% increase in physical assault cases.

Criminals are no longer limited to targeting victims directly; home invasions have become common, with attackers sometimes breaking into victims’ residences or targeting spouses, children, or elderly parents to coerce cooperation.

A strategy called “honey trap” has also appeared in data, where attackers establish fake romantic relationships to plan assaults. This social engineering approach shows that attackers are increasingly combining physical violence with psychological manipulation.

In a recent case announced by the U.S. Department of Justice, a member of a criminal group traveled to New Mexico in July 2024 to break into a victim’s home with the intent to steal a hardware virtual currency wallet. This burglary was coordinated in real-time with remote monitoring of the victim’s physical location.

04 Underlying Causes: The “Technological Paradox” Between Tech and Physical Security

Behind the surge in wrench attacks lies a phenomenon known as the “technological paradox”: the enhancement of digital security technology has, paradoxically, driven criminal methods toward physical violence.

As on-chain code becomes increasingly difficult to exploit, attackers are adjusting their strategies, shifting toward more complex tactics. When code is hard to attack, human factors become the primary attack surface.

The anonymity and irreversibility of cryptocurrency transactions give criminals confidence that once funds are transferred, they are difficult to trace and nearly impossible to recover.

Attackers exploit the ease of obtaining personal information. From addresses to family details, online collection of personal data has become easier than ever, enabling attackers to identify and track potential victims more simply.

Alena Vranova, founder of SatoshiLabs, pointed out in August that at least one Bitcoin holder is kidnapped, tortured, or extorted somewhere in the world every week, sometimes facing even worse situations.

05 Personal Defense: From Bait Wallets to Multi-Layered Security Strategies

In response to the growing threat of wrench attacks, individual cryptocurrency holders can adopt a series of defensive measures to reduce risk. Bait wallets are an effective initial defense, containing seemingly reasonable amounts of funds that can be handed over immediately if attacked.

Maintaining geographic separation between seed phrases and hardware wallets is a key strategy. Storing backups in different physical locations prevents attackers from gaining all access at once.

CertiK recommends that crypto holders minimize their public crypto footprint, avoiding screenshots of portfolios and public disclosure of wallet addresses. Showing off crypto gains on social media or public forums can inadvertently attract criminals’ attention.

For high-risk individuals, multi-signature wallet architectures provide additional security, requiring multiple approvals before any transaction is executed. Implementing 2-of-3 or 3-of-5 signature schemes is advisable.

Time-locked smart contracts are another useful technology, enforcing mandatory delays on large withdrawals. Incorporating family security education into overall security plans is also crucial, as family members often become targets.

06 Industry Response: Emerging Solutions and Insurance Coverage

The crypto industry is actively developing solutions to counter wrench attacks, with the “emergency wallet” concept gaining widespread attention. These wallets are designed to assist users during physical attacks by secretly alerting trusted contacts, emptying funds, delaying transactions, or redirecting attackers to bait wallets.

Several well-known companies have begun offering insurance products that include coverage for wrench attacks. Insurance giant Lloyd’s of London has started providing policies with wrench attack coverage for its clients.

Crypto security firm Haven is developing a cryptocurrency wallet with additional security features, including continuous biometric checks to ensure only the owner can send tokens, and geofencing to block transactions outside designated locations like home or work.

Notably, Gate, a leading industry trading platform, always prioritizes user security, offering advanced digital security measures and actively researching comprehensive solutions against emerging threats.

Blockchain intelligence platforms play a key role in tracking stolen assets. Advanced blockchain analysis and attribution technologies from companies like TRM Labs help law enforcement and investigators trace fund flows, identify potential money laundering routes, and support efforts to bring criminals to justice.

Future Outlook

Global law enforcement has recovered less than 5% of funds related to wrench attacks relative to total losses, while the real-time monitoring system of crypto exchange Gate has successfully issued early warnings and prevented multiple suspicious tracking activities targeting its users.