CertiK says crypto wrench attacks exposed $124.1 million in H1 2026

CertiK says crypto wrench attacks exposed $124.1 million in H1 2026

Chainalysis said more than $30 million was stolen in successful attacks in H1, while France emerged as the main hotspot amid a rise in home invasions, kidnappings and data breach-linked targeting.

Fact Check
All three components of the claim are verified. CertiK's primary Intel3D H1 2026 report confirms ~$124.1M in wrench-attack exposure. Chainalysis documented 46 incidents with a ~26% success rate, matching '12 of 46 public attacks produced payments' (26% of 46 ≈ 12). France's Interior Minister reported 77 kidnappings/extortions/attempted extortions in H1 2026 and the government introduced new protections, confirmed by Cointelegraph sourced to BFM Business. Sources include the primary CertiK report plus corroborating news_primary reporting.
Summary

Violent attacks on cryptocurrency holders worsened in the first half of 2026, with CertiK documenting 52 publicly verified wrench attacks and more than $124 million in total financial exposure, up 33% from 39 incidents a year earlier. Chainalysis separately said successful attacks extracted more than $30 million in H1, while total exposure reached roughly $107 million when attempted thefts, blocked transfers, demanded ransoms and recovered assets were included. If the current pace continues, 2026 would surpass the $58 million stolen in all of 2025, though the final outcome will depend on activity in the second half. France remained the main hotspot, with Chainalysis recording 30 publicly known incidents through mid-2026 and French Interior Minister Laurent Nuñez saying authorities had documented more than 70 crypto-related violent cases. Chainalysis linked the French surge to compromised personal data, including an alleged 2024 sale of dossiers by a tax official and a later Waltio breach affecting about 50,000 users. The report said home invasions accounted for 37% of reported incidents in 2026, kidnappings remained the most common overall, and attackers increasingly targeted relatives to force transfers. Through late June, only 12 of 46 documented violent theft attempts resulted in victims surrendering funds, a 26% success rate down from 49% in 2025 and 67% in 2024. On-chain patterns ranged from direct transfers to centralized exchanges to routing through decentralized exchanges, bridges and intermediary wallets, with one traced case intersecting services tied to cartel money-laundering networks, terrorist-financing clusters and wallets linked to alleged cocaine trafficker Ryan Wedding.

Terms & Concepts
  • wrench attacks: Physical attacks or threats used to force a crypto holder or relatives to authorize transfers or surrender access to funds.
  • centralized exchanges: Crypto trading platforms run by an operator that custody assets and process transactions for users.
  • intermediary wallets: Additional wallet addresses used between transfers to make stolen funds harder to trace.