Violent crypto attacks have stolen an estimated $30 million from holders in the first half of 2026. This puts the year on track to surpass 2025’s record $58 million total, according to a new Chainalysis report.

The figure counts only successful thefts. France has driven much of the increase, recording 30 known incidents this year and emerging as the leading global hotspot for so-called wrench attacks.

France Emerges as Top Hotspot for Violent Crypto Attacks Worldwide

France recorded only a handful of crypto-related violent incidents before 2025. That number jumped to 19 last year and reached 30 by mid-2026.

Interior Minister Laurent Nuñez previously said that authorities had documented 77 such incidents. He also announced plans for a rapid alert system to protect at-risk figures in the sector.

Investigators trace the surge to a 2024 breach. A French tax official allegedly stole and sold dossiers on high-net-worth holders, including their names, addresses, holdings, and phone numbers.

The pace reflects that shift. France averaged about 1.9 attacks per month in 2025. By the first half of 2026, that rate had climbed to roughly 4.6.

The report flagged two separate triggers, both in January 2026. First, French authorities made the tax-leak case public. That raised an alarm but may have prompted criminals to use the stolen dossiers more quickly. 

Second, tax-reporting firm Waltio disclosed a separate breach of roughly 50,000 users, giving attackers a fresh pool of targets.

Eric Jardine, Head of Research at Chainalysis, told BeInCrypto that databases that hold sensitive holder information remain targets for attackers.

“Any time a central repository collects valuable, exploitable intelligence, illicit actors will seek to attempt a breach. This is especially true of sensitive information like tax records. Implementing strict information controls on targetable data is one useful way to mitigate the risks,” Jardine said.

Beyond France, the highest cumulative incident counts since 2023 belong to the US, Brazil, and Thailand.

“Thailand is a crypto-friendly jurisdiction that attracts a large expat and tourist population. Some of these newcomers may be bringing their crypto holdings with them. One unfortunate implication of this trend is a larger population of potential wrench attack victims,” Jardine explained.

Follow us on X to get the latest news as it happens

Success Rates Drop as Family Members Become Targets

Meanwhile, despite the rise in attacks, Chainalysis observed a sharp drop in attacker success rates. Only 26% of attempts succeeded through late June, down from 49% in 2025 and 67% in 2024.

Jardine noted that the declining payoff has not yet changed the attacker’s behavior. Leaked data on crypto holders, he said, continues to drive incidents higher year-over-year even as fewer attempts succeed.

The nature of attacks has also shifted. Home invasions rose to 37% of incidents in 2026, up from 14% a year earlier, while kidnappings remain the most common category at 52%.

Attackers increasingly use relatives as leverage. Family members or acquaintances now account for 25% to 30% of cases globally and over 40% of incidents in France.

For holders, the takeaway is operational security. Publicizing crypto wealth, whether on social media, at conferences, or through on-chain activity tied to a real name, turns individuals into targets. 

Subscribe to our YouTube channel to watch leaders and journalists provide expert insights

Source: BeInCrypto