There is no directly comparable official figure for 2025 because the ministry began recording events under the current classification on January 1, 2026. That makes claims about the exact year-on-year growth rate difficult, but other datasets independently identify France as the center of this year’s rise in violent crypto crime.
Why Are the Official Numbers Much Higher Than Public Trackers?
Chainalysis counted 30 publicly known violent crypto incidents in France through mid-2026 and warned that the real number was almost certainly higher. Its global data showed more than $30 million successfully stolen through violent crypto attacks during the first half of 2026, compared with a record $58 million for all of 2025.
The gap between the French government’s 90 cases and public trackers does not necessarily indicate conflicting data. Police records can include attempted crimes, threats, extortion and incidents that never become public, while private databases generally depend on cases that can be independently identified through press reports or other open sources.
Earlier French police figures had already put the broader count at 77 cases by mid-year, well above the number visible in public databases.
Chainalysis also found that 93% of French victims with known residency were residents rather than tourists. More than 40% of incidents involved a relative or associate of a crypto holder rather than the holder directly.
Investor Takeaway
Crypto security increasingly includes protecting the link between an investor’s identity, physical address and identifiable digital wealth—not merely securing the wallet itself.
Are Data Leaks Helping Criminals Choose Targets?
One of the strongest explanations for France’s concentration of attacks is the exposure of personal financial information, although public evidence does not establish that any single breach caused the entire wave.
Chainalysis points to an alleged 2024 compromise involving a French tax official accused of selling dossiers containing information on wealthy crypto holders, including names, addresses, telephone numbers, holdings and tax records. The firm observed a sharp acceleration in violent incidents after late 2024.
A separate breach at French crypto tax software provider Waltio added another layer of risk in January 2026. Waltio said compromised information included customer email addresses, 2024 gains or losses and cryptocurrency balances used for tax calculations.
Importantly, Waltio says attackers did not obtain postal addresses, wallet addresses, private keys, transaction histories or banking information. The exposed data nevertheless could reveal that an email account belonged to someone holding crypto and provide an approximate indication of their assets.
The distinction matters because target selection can combine multiple sources. Criminals can potentially correlate leaked financial data with social media profiles, publicly identified businesses, blockchain activity or information obtained from insiders.
Why Are Relatives Becoming Targets?
The targeting of family members suggests that some attacks involve reconnaissance before physical violence begins. A crypto holder may secure assets with hardware wallets and multisignature arrangements, yet an attacker may instead abduct or threaten someone close to them to force cooperation.
France has already seen several examples. In May, attackers allegedly tried to abduct the wife of The Sandbox co-founder Sébastien Borget after one suspect posed as a delivery worker at the family home. The attempt failed after nearby residents intervened.
Other cases have involved home invasions, relatives of crypto executives and victims targeted at addresses linked to previous wealthy occupants.
Investor Takeaway
Self-custody removes institutional counterparty risk, but concentrated personal control can create another vulnerability when criminals can identify who controls the assets.
What Can Authorities Do About Wrench Attacks?
French authorities increasingly treat the cases as organized crime rather than isolated robberies. Investigations have been coordinated through specialized organized-crime structures, while the Interior Ministry has introduced additional protection and prevention measures for people exposed through the crypto sector.
The blockchain itself can sometimes help investigators after an attack. A coerced cryptocurrency transfer creates an onchain trail, and funds sent directly to regulated exchanges can potentially be frozen or linked to identifiable accounts. More sophisticated groups may instead use bridges, decentralized exchanges and laundering services to obscure the proceeds.
The broader rise in wrench attacks changes the security calculation for crypto investors. Strong encryption can prevent unauthorized digital access, but it cannot prevent coercion once criminals know who owns the assets, where that person lives and who can be used as leverage.