Physical coercion attacks against cryptocurrency holders reached $124 million in the first half of 2026, setting a record pace that threatens to nearly double full-year 2025 losses. The surge reveals a critical blind spot in the crypto industry: while engineers have built increasingly sophisticated on-chain security systems, criminals are bypassing them entirely by targeting the humans who hold the keys.

The term "wrench attack" originated as a dark joke in cryptography circles, referencing a concept formulated decades ago by security researcher Bruce Schneier: if an attacker can apply enough physical pressure, no amount of cryptographic protection matters. In crypto, the joke became a documented threat category. CertiK's Intel3D unit, which released its Wrench Attacks Report on July 23, 2026, tracks physical coercion incidents resulting in forced cryptocurrency transfers, including home invasions, street robberies, kidnappings, and forced device unlocking at gunpoint.

The $124 million figure covers confirmed or forensically corroborated incidents across 38 jurisdictions from January through June 2026. Critically, this does not include fraud, phishing, or on-chain exploits. It measures only incidents where physical force or credible threats of force compelled victims to transfer assets. However, law enforcement reporting rates for crypto-related robbery remain lower than for conventional robbery in most jurisdictions, partly because victims fear regulatory scrutiny. CertiK's analysts estimate that documented cases represent 60 to 70 percent of actual incidents, meaning the true H1 2026 toll may approach $180 to $200 million.

Where Are These Attacks Happening, and Who Is Being Targeted?

The geographic distribution of physical crypto attacks has shifted dramatically. Western Europe and North America now account for 38 percent of documented incidents by case count, up from approximately 22 percent in 2023. The United States alone accounted for 19 percent of global documented incidents in H1 2026. The United Kingdom, the Netherlands, and Germany have all recorded high-profile cases this year. This geographic expansion reflects regulatory normalization, spot Bitcoin exchange-traded funds (ETFs) in the US, and MiCA (Markets in Crypto-Assets) compliance frameworks in Europe, which have brought crypto wealth into more public view.

The victim profile is shifting in ways that should concern the average crypto holder. The popular image of a wrench attack victim is a publicly known crypto billionaire. That image is increasingly wrong. CertiK's incident profiling for H1 2026 reveals a significant shift toward mid-tier holders, individuals with between $100,000 and $5 million in documented or inferable crypto holdings. This shift reflects rational criminal economics: ultra-high-net-worth targets now typically employ dedicated physical security and operate under assumed names for blockchain activity. Mid-tier holders, by contrast, often self-custody significant assets, live ordinary residential lives, and have taken few or no physical security precautions. Social media exposure is a documented precursor in a substantial share of cases, making public discussions of crypto holdings a measurable liability.

How to Reduce Your Physical Security Risk as a Crypto Holder

• Limit Public Disclosure: Avoid discussing your crypto holdings on social media, at conferences, or in public settings where your identity can be linked to your assets. Criminals actively monitor public statements and social media profiles to identify targets.
• Separate Your Operational Security from Your Cryptographic Security: Hardware wallets and multi-signature systems protect against on-chain theft, but they do not protect against physical coercion. Combine technical security with operational discipline, such as maintaining a low public profile and varying your routines.
• Understand Your Threat Model: Self-custody without accompanying physical security training is now a measurable liability. Evaluate whether your living situation, public visibility, and local crime environment justify the risks of holding large amounts of crypto outside an exchange.

The industry's obsession with on-chain security has created a blind spot: self-custody without operational security training is now a measurable liability. Hardware wallet adoption, without accompanying physical security practices, may be increasing risk rather than reducing it for the average retail holder. A person who publicly announces they use a hardware wallet and holds significant crypto is, in some cases, a more attractive target than someone holding the same amount on an exchange, because the attacker knows the victim has direct control of the keys.

What Does This Mean for the Broader Crypto Industry?

The acceleration of physical attacks reflects a maturation of the threat landscape. Between 2015 and 2018, fewer than 20 documented attacks occurred per year. The inflection point came in 2021, when Bitcoin surpassed $60,000 for the first time and mainstream media ran thousands of stories about crypto millionaires. By 2023, documented incidents exceeded 60 per year. By 2025, the count surpassed 100 confirmed incidents globally. At the H1 2026 run rate, annual physical attack losses would reach approximately $248 million, nearly double the estimated full-year 2025 total of $132 million.

This trajectory demands serious attention from anyone who holds crypto outside of an exchange, and from the broader industry that has so far treated physical security as someone else's problem. The data shows that as crypto adoption spreads and wealth becomes more distributed across mid-tier holders in developed markets, the addressable pool of potential victims has grown substantially. Criminals have adapted their targeting strategies accordingly, shifting from high-risk, high-reward attacks on known billionaires to lower-risk attacks on ordinary people with ordinary lives who happen to hold significant crypto assets.

The irony is sharp: the industry has invested billions in making on-chain transactions more secure, more private, and more resistant to technical exploitation. Yet the weakest link remains the person holding the private key. No amount of cryptographic sophistication can protect against a credible threat to personal safety. As physical attacks accelerate and geographic distribution widens, the conversation around crypto security must expand beyond smart contract audits and wallet architecture to include the unglamorous, essential work of operational security and threat awareness.