Chainalysis reports violent robberies of crypto holders have stolen roughly $30 million in H1 2026, putting the year on pace to surpass 2025’s $58 million. France has become the main hotspot after a 2024 tax-office data leak and a separate Waltio breach expanded the pool of targets. Although attacker success rates have dropped to about 26% by June, incidents, home invasions and kidnappings have increased, and relatives are increasingly used as leverage. Experts urge stronger data controls and operational security for holders.
Violent Crypto Robberies Net $30M in H1 2026 as France Emerges as Global Hotspot
Photo by BeInCrypto
Violent attacks targeting cryptocurrency holders have resulted in an estimated $30 million in losses during the first half of 2026, according to a Chainalysis report. If the current pace continues, 2026 is on track to exceed 2025’s total of $58 million in thefts.
Key Findings
Chainalysis counts only successful thefts. Much of the recent surge is concentrated in France, which recorded 30 documented "wrench attacks" by mid-2026 and has become the global hotspot for this violent crime. France saw only a handful of such incidents before 2025; that number rose to 19 in 2025 and reached 30 by mid-2026. Interior Minister Laurent Nuñez has said authorities have documented 77 such incidents and plan to introduce a rapid alert system to protect at-risk sector figures.
What Drove the Spike?
Investigators trace the surge to a 2024 internal breach in which a French tax official allegedly stole and sold dossiers containing names, addresses, asset holdings and phone numbers of high-net-worth crypto holders. That leak exposed potential victims and helped criminals target them more easily.
Chainalysis also identified two catalysts in January 2026: the public disclosure of the tax-leak investigation, which may have prompted criminals to act quickly on the stolen data, and a separate breach at tax-reporting firm Waltio affecting roughly 50,000 users, which expanded the pool of vulnerable targets.
Violent Attacks on Crypto Holders in France. Source: Chainalysis
Trends, Tactics and Geography
France’s attack rate climbed from an average of about 1.9 incidents per month in 2025 to roughly 4.6 per month in the first half of 2026. Outside France, the United States, Brazil and Thailand have the highest cumulative incident counts since 2023.
The nature of attacks is also changing: home invasions accounted for 37% of incidents in 2026 (up from 14% a year earlier), while kidnappings remain the single largest category at 52%. Attackers increasingly use relatives or acquaintances as leverage — they are involved in roughly 25–30% of cases globally and in over 40% of incidents in France.
Eric Jardine, Head of Research at Chainalysis: "Any time a central repository collects valuable, exploitable intelligence, illicit actors will seek to attempt a breach. This is especially true of sensitive information like tax records. Implementing strict information controls on targetable data is one useful way to mitigate the risks."
Success Rates and Implications
Despite the rise in incidents, attacker success rates have fallen sharply: by late June 2026 only about 26% of attempts succeeded, down from 49% in 2025 and 67% in 2024. Chainalysis notes that lower payoffs have not yet deterred attackers because the availability of leaked holder data continues to drive incidents upward.
Practical Advice for Crypto Holders
Operational security matters: avoid public displays of crypto wealth on social media, maintain strict privacy around residence and travel details, separate on-chain activity from real-world identities, and use strong access controls (hardware wallets, multi-signature, and cold storage). Organizations that hold sensitive customer records should implement stricter data controls, rapid-breach notification systems, and limit access to high-risk personal data.
Source: Chainalysis report; original reporting by Kamina Bashir at BeInCrypto.
Help us improve.
