CertiK reports a significant increase in ransomware attacks and wrench attacks in the crypto industry during the first half of 2026. The report identifies France as one of the most concerning high-risk regions, with related cases continuing to raise security concerns within the industry.
violent extortion is on the rise
In the first half of the year, offline threats against cryptocurrency holders increased. A so-called "wrench attack" typically refers to an attacker using violence or coercion to force a victim to hand over their wallet, password, or transfer privileges.
France remains the focus
CertiK points out that France continues to be at the center of these cases. Several kidnapping and extortion incidents involving crypto professionals and investors have occurred there previously, further spilling security risks over into the industry's daily operations.
Industry safety pressures are increasing
The rise in such incidents indicates that the risks of crypto assets are no longer limited to on-chain attacks and exchange vulnerabilities, but have extended to real-world personal safety. Offline protection is becoming increasingly important for traders, custodians, and high-net-worth individuals.











