TheBlock
Physical "wrench attacks" against crypto holders continued through the second quarter, pushing the first-half total to 52 incidents, according to blockchain security firm CertiK. Recorded financial exposure, including money demanded and stolen, climbed more than 1,000% versus the same period last year.
Why it matters
Wrench attacks are physical coercion incidents targeting people known to hold crypto, rather than remote hacks. The category carries unique reputational risk for the industry because the threat bypasses every cryptographic control in the stack: a seed phrase and a hardware wallet offer no defence against a coerced signer. CertiK's figures suggest the threat model for individual holders has shifted materially toward physical-world risk, not just phishing or protocol exploits.
Market impact
Western Europe, and France in particular, bore the brunt of the incidents in the first half. The tenfold jump in exposure matters more than the 52-incident count: it points to attackers concentrating on higher-net-worth targets rather than random street-level robberies. Expect OPSEC guidance, multi-sig custody, and home security consulting to become a more visible segment of the institutional crypto stack through the rest of 2025.
Frequently asked questions
-
What is a crypto 'wrench attack' in CertiK's H1 2025 report?
A wrench attack is a physical coercion incident targeting a person known to hold crypto, bypassing cryptographic controls by threatening or forcing the victim to hand over wallet credentials or assets directly.
-
How many wrench attacks did CertiK record in the first half of 2025?
CertiK recorded 52 wrench attacks in H1 2025, with Q2 frequency slowing from Q1 but the value targeted climbing more than tenfold year-on-year.
-
How much did recorded exposure from wrench attacks rise in H1 2025?
Recorded financial exposure, including money demanded and stolen, rose more than 1,000% versus the same period in the prior year, according to CertiK.
-
Which regions bore the brunt of wrench attacks in H1 2025?
Western Europe took the heaviest share of incidents, with France accounting for a disproportionate portion of the reported cases.
-
What can crypto holders do to mitigate wrench attack risk?
Standard mitigations include multi-signature custody, geographically distributed key storage, home security controls, and keeping holdings private. These target the human element that cryptography cannot protect.
CryptoSlate
CoinDesk
WuBlockchain
CoinTelegraph
Lookonchain