Key Takeaways
- • Wrench attacks on cryptocurrency holders have surged 250% according to a CertiK report, marking a strategic shift by criminal organizations from digital hacking to physical violence targeting wealthy individuals holding digital assets.
- • High-profile incidents include a San Francisco robbery in November where thieves posing as delivery drivers stole $11-13 million in Bitcoin and Ethereum, and a Minnesota kidnapping case in September where two brothers used firearms to extract $8 million in cryptocurrency from a family hostage situation.
- • Cryptocurrency's structural characteristics—irreversible transactions, lack of intermediary protection, pseudonymity, and the absence of physical asset burden—make digital wealth an attractive target for organized crime groups already proficient in violence-based theft operations.
- • Phishing attacks and private key compromises account for $668 million in quarterly losses, with the WazirX exchange breach in July resulting in $231 million stolen across 200+ cryptocurrencies, demonstrating that both digital and physical attack vectors remain substantial threats.
- • Ethereum remains the primary blockchain target, with $387.8 million stolen across 86 incidents, while the shift to wrench attacks reflects criminal adaptation to increased blockchain security measures and the mainstream financialization of cryptocurrency holdings.
Summary
Wrench attacks—physical assaults targeting cryptocurrency holders to coerce asset transfers—have emerged as a significant and growing threat to wealthy digital asset holders, according to security firm CertiK's latest report. The term, popularized by an online comic mocking how easily high-tech security can be defeated through physical coercion, describes incidents where criminals use violence, kidnapping, and intimidation to extract cryptocurrency holdings directly from victims or their security infrastructure.
The surge reflects a fundamental strategic shift in cryptocurrency crime. Criminal organizations traditionally focused on digital hacking vectors have increasingly migrated toward physical violence targeting wealthy individuals, exploiting the unique characteristics of blockchain-based assets. As Phil Ariss of crypto tracing firm TRM Labs noted, "Criminal groups already comfortable with using violence to achieve their goals were always likely to migrate to crypto." The irreversibility of blockchain transactions, combined with the absence of intermediary protection or government recourse, creates a one-way value extraction mechanism that appeals to organized crime networks.
Recent high-profile cases illustrate the scope and sophistication of these attacks. In November 2025, a San Francisco resident lost between $11-13 million in Bitcoin and Ethereum when an assailant posing as a pizza delivery driver forced entry, zip-tied the victim with duct tape, and extracted funds over approximately 90 minutes while accomplices on loudspeaker repeated personal information to intimidate the target. Two months earlier, Texas brothers Raymond Christian Garcia and Isiah Angelo Garcia were federally charged with kidnapping after holding a Minnesota family hostage with firearms, demanding and stealing $8 million in cryptocurrency while forcing one victim to retrieve a hardware wallet from a family cabin. An Italian man was allegedly kidnapped and tortured within an upscale Manhattan townhouse in an attempted bitcoin extraction.
The underlying vulnerability extends beyond physical security. CertiK's latest Web3 security report revealed that despite a 27-incident decline in hacking incidents quarter-over-quarter, total theft values surged to $750 million across 155 incidents, representing a 9.5% increase. Phishing and private key compromises accounted for $668 million in losses, with the July WazirX exchange breach alone yielding $231 million across 200+ cryptocurrencies. A single phishing attack on a Bitcoin whale in August resulted in $238 million in losses—the largest phishing incident on record for the period. Ethereum, the second-largest blockchain, remains the primary target with $387.8 million stolen across 86 incidents.
For institutional investors and family offices holding concentrated cryptocurrency positions, the escalation of wrench attacks represents a material operational security risk requiring comprehensive physical security protocols, custody structures through regulated intermediaries, and diversified asset storage across jurisdictions. The confluence of digital vulnerability and physical targeting reflects cryptocurrency's maturation as an asset class sufficiently liquid and valuable to justify organized crime investment in violence-based extraction strategies.
The surge reflects a fundamental strategic shift in cryptocurrency crime. Criminal organizations traditionally focused on digital hacking vectors have increasingly migrated toward physical violence targeting wealthy individuals, exploiting the unique characteristics of blockchain-based assets. As Phil Ariss of crypto tracing firm TRM Labs noted, "Criminal groups already comfortable with using violence to achieve their goals were always likely to migrate to crypto." The irreversibility of blockchain transactions, combined with the absence of intermediary protection or government recourse, creates a one-way value extraction mechanism that appeals to organized crime networks.
Recent high-profile cases illustrate the scope and sophistication of these attacks. In November 2025, a San Francisco resident lost between $11-13 million in Bitcoin and Ethereum when an assailant posing as a pizza delivery driver forced entry, zip-tied the victim with duct tape, and extracted funds over approximately 90 minutes while accomplices on loudspeaker repeated personal information to intimidate the target. Two months earlier, Texas brothers Raymond Christian Garcia and Isiah Angelo Garcia were federally charged with kidnapping after holding a Minnesota family hostage with firearms, demanding and stealing $8 million in cryptocurrency while forcing one victim to retrieve a hardware wallet from a family cabin. An Italian man was allegedly kidnapped and tortured within an upscale Manhattan townhouse in an attempted bitcoin extraction.
The underlying vulnerability extends beyond physical security. CertiK's latest Web3 security report revealed that despite a 27-incident decline in hacking incidents quarter-over-quarter, total theft values surged to $750 million across 155 incidents, representing a 9.5% increase. Phishing and private key compromises accounted for $668 million in losses, with the July WazirX exchange breach alone yielding $231 million across 200+ cryptocurrencies. A single phishing attack on a Bitcoin whale in August resulted in $238 million in losses—the largest phishing incident on record for the period. Ethereum, the second-largest blockchain, remains the primary target with $387.8 million stolen across 86 incidents.
For institutional investors and family offices holding concentrated cryptocurrency positions, the escalation of wrench attacks represents a material operational security risk requiring comprehensive physical security protocols, custody structures through regulated intermediaries, and diversified asset storage across jurisdictions. The confluence of digital vulnerability and physical targeting reflects cryptocurrency's maturation as an asset class sufficiently liquid and valuable to justify organized crime investment in violence-based extraction strategies.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.