Europe has become the riskiest region for wrench attacks, according to a new report from blockchain security firm CertiK. The report tracks physical crimes tied to crypto ownership, such as robberies, assaults, and kidnappings where attackers force victims to hand over coins. CertiK counted 72 verified wrench attacks worldwide in 2025, up 75% from 2024. Europe made up more than 40% of those wrench attacks, nearly double its share a year earlier.
CertiK says wrench attacks are getting harsher. Kidnappings rose 66% in 2025, while physical assaults jumped 250%. These wrench attacks often start with doxxing and basic surveillance. Criminals look for brag posts, wallet screenshots, or clues about where someone lives. CertiK says many wrench attacks use OSINT, or open-source intelligence, pulled from public data and social media.
Wrench attacks hit Europe harder than other regions in the dataset. France was the top country in 2025, with 19 incidents, more than any other nation tracked. The United States logged eight in the same count.
A high-profile case showed how wrench attacks can turn brutal. In January 2025, Ledger co-founder David Balland and his wife were kidnapped from their home in France, and the attackers demanded a large crypto ransom. Prosecutors said Balland was seriously injured during the ordeal before police freed the couple and detained suspects. The case became a warning that wrench attacks are not only about money.
Wrench attacks are not limited to Europe. Asia still made up about one-third of cases in 2025. CertiK flags risk to crypto tourists and expatriates in hubs like Thailand and Hong Kong. Some wrench attacks begin after a target shares a ride, flashes a wallet app, or meets a new contact who seems helpful.
Wrench attacks can also be costly, even when totals are unclear. CertiK says losses linked to wrench attacks exceeded $40.9 million in 2025, but the figure is likely low because many victims do not report crimes, and ransoms can be hard to trace. In wrench attacks, the goal is speed.
The report’s main point is that code upgrades alone will not stop wrench attacks. As exchanges and wallets get harder to crack online, criminals shift to real-life pressure. CertiK says humans remain the single point of failure, which helps explain why wrench attacks can rise even when cybersecurity improves. That is why “just protect your seed phrase” is no longer enough.
To cut the risk of wrench attacks, focus on simple habits and personal security awareness. Limit what you share online. Avoid posting your location in real time. Keep most funds in cold storage on a hardware wallet, and keep only a small “spending” wallet on your phone. For larger balances, use multi-signature wallets or a passphrase so one stolen device cannot move everything at once. These steps cannot prevent every wrench attack, but they can slow a thief and limit damage.
While wrench attacks rise, Russia is moving closer to opening crypto trading to more retail users. State Duma lawmaker Anatoly Aksakov said a draft bill is ready that would let non-qualified investors trade crypto under set limits, according to Russian reporting. Under the plan discussed by officials, non-qualified investors could buy up to 300,000 rubles of crypto, while professional market participants would face no such cap. Officials also say the rules could support cross-border settlements and the overseas placement of Russian-issued tokens.
Russia’s central bank has laid out a similar framework. In a December 23, 2025 statement, the Bank of Russia said non-qualified investors could buy the most liquid cryptocurrencies only after passing a risk-awareness test, and only within the 300,000 ruble annual limit through one intermediary. The same proposal says crypto and stablecoins may be traded but may not be used for payments inside Russia.
Both stories meet at the user level. More access can bring more new holders, and new holders can become targets for wrench attacks if they overshare or carry large balances on a phone. CertiK says wrench attacks are rising faster in Europe than in North America, but it warns this does not prove North America is “safe.”
For anyone holding crypto in 2026, wrench attacks are part of the threat map. Treat personal safety like wallet safety. Keep your identity and holdings private, plan how you move funds, and assume criminals read the same posts you do. Wrench attacks succeed when a target has no plan and no time.