In addition to digital threats, physical attacks have also become more visible in the crypto asset industry. According to Blockchain security company CertiK’s Wrench Attacks Report study covering the first half of 2026, the number of confirmed physical attacks targeting crypto asset holders has increased significantly compared to the same period last year.
Cases and amounts rose rapidly in the first half
CertiK recorded 52 confirmed attacks globally in the first six months of 2026. This number increased from 39 cases in the same period in 2025. The financial amount associated with the attacks also increased from approximately $10.5 million to $124.1 million. Housing raid incidents that were reflected in the public increased from 1 case in the first half of 2025 to 20 cases in the first half of 2026.
CertiK emphasized that the recorded amounts are not verified proceeds of crime, but financial exposure data covering reported losses and ransom demands.
The company stated that this data only includes publicly verifiable events. He also warned that the real picture may be larger due to unreported cases. CertiK is known as an international security company that publishes research in the field of blockchain and smart contract security.
Mini dictionary: Wrench attack refers to the type of attack that attempts to access a person’s crypto assets not through online methods, but through physical pressure, threats or use of force. In such incidents, the goal is to extort wallet keys or transfer confirmation.
| Indicator | 2025 first half | 2026 first half |
|---|---|---|
| Confirmed attack | 39 | 52 |
| financial amount | $10.5 million | $124.1 million |
| housing raid | 1 | 20 |
Europe came to the fore, France ranked first
The data also pointed out a remarkable change in geographical distribution. Of the 52 confirmed incidents, 39 were recorded in Europe. France alone was the country with the most confirmed physical crypto attacks in CertiK data, with 33 cases.
CertiK did not attribute this concentration to a single reason. The company pointed out that the large crypto ecosystem in Western Europe, the flow of public information that can facilitate the identification of potential targets, and stronger reporting of events may be effective in this situation.
The company’s findings show that physical threats to crypto asset holders are increasingly concentrated in Western Europe.
Wallet security alone is not considered sufficient
The report stated that focusing solely on wallet security may not be enough to prevent every attack. CertiK proposed custody solutions that make it difficult for a single person to move large amounts of crypto assets under pressure.
It was evaluated that measures such as multiple confirmation mechanisms, withdrawal delays, transaction limits and tiered retention could slow down unauthorized transfers, while also providing additional time for intervention. Thus, it was revealed that the crypto security debate goes beyond software and smart contracts and includes the protection of people who manage assets.
