Audit log

Every state-changing event for 2026 Violent Crypto Wrench Attack Wave — H1 Chainalysis Report: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-08-12 23:20:35Z
   Score: ? → ? (no score change)
   anchorpending

   chain

   ●—

   hash

   8aopdoLymKjL…JeatSniXcopysha256 → base58

   verifying row…

   canonical bytes (35843 B) ▸

   {"actor":"system:backfill","investigation_id":"f28d76b9-cdf1-4557-be03-b49d1155a986","kind":"publish","page_slug":"2026-violent-crypto-wrench-attack-wave-h1-chainalysis-report","published_at":"2026-08-12T23:20:34.892Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"2026 Violent Crypto Wrench Attack Wave — H1 Chainalysis Report","sections":[{"content":"Chainalysis published its H1 2026 wrench attack report on August 6, 2026, documenting 46 publicly recorded violent incidents targeting cryptocurrency holders through late June, with confirmed losses exceeding $30 million. The firm noted the 2026 full-year pace would surpass the prior record of $58 million set in 2025 if the rate holds. A parallel report from CertiK's Intel3D unit, released July 22-25, 2026, used a broader methodology and verified 52 incidents globally, placing total financial exposure — including ransom demands, forced transfers, and frozen or partially recovered assets — at $124.18 million, an 11.8-fold increase over the $10.5 million recorded in H1 2025. CertiK identified a 33.3% year-over-year increase in incident count, up from 39 incidents in H1 2025. The average recorded exposure per incident jumped from approximately $270,000 in H1 2025 to $2.39 million in H1 2026, indicating a shift toward higher-value, more deliberate targeting. Chainalysis found that through late June 2026, only 26% of violent theft attempts (12 of 46) resulted in a payment to attackers, down from 49% in 2025 and 67% in 2024, consistent with increased law enforcement pressure and improved victim resistance training.","heading":"Overview and Scale","severity":"critical","sources":[{"credibility":2,"name":"Violent Wrench Attacks Targeting Crypto Holders — Chainalysis (August 6, 2026)","type":"research","url":"https://www.chainalysis.com/blog/violent-crypto-wrench-attacks-2026/"},{"credibility":2,"name":"CertiK Intel3D H1 2026 Wrench Attacks Report — GlobeNewswire press release (July 25, 2026)","type":"research","url":"https://www.globenewswire.com/news-release/2026/07/25/3333162/0/en/CertiK-Intel3D-H1-2026-Wrench-Attacks-Report-Reveals-33-Surge-in-Physical-Crypto-Crime-Estimated-Losses-Top-124-Million.html"},{"credibility":2,"name":"Crypto Wrench Attacks on Pace for Record Year as $30M Stolen in 2026: Chainalysis — Decrypt (August 2026)","type":"news_article","url":"https://decrypt.co/375014/crypto-wrench-attacks-30m-stolen-2026-chainalysis"},{"credibility":2,"name":"More than $30 million stolen in violent crypto attacks in 2026 as France emerges as hotspot — The Block (August 6, 2026)","type":"news_article","url":"https://www.theblock.co/post/410984/more-than-30-million-stolen-in-violent-crypto-attacks-in-2026-as-france-emerges-as-wrench-attack-hotspot-chainalysis"},{"credibility":2,"name":"Violent crypto attacks surge in 2026 with over $124M in financial exposure, France hit hardest — CryptoBriefing","type":"news_article","url":"https://cryptobriefing.com/violent-crypto-attacks-surge-2026-france/"}]},{"content":"Home invasions became the defining tactic of the 2026 wave, rising from a single documented case in H1 2025 to 20 cases in H1 2026 — representing approximately 37–41% of all documented incidents depending on the reporting methodology. Kidnappings increased from 12 to 16 incidents year-over-year. Reported torture cases held steady at four, and one confirmed crypto-related homicide was recorded, matching the H1 2025 figure. Attackers have increasingly extended targeting to family members, associates, and bystanders to pressure primary victims who may themselves have enhanced security. Chainalysis categorized money-laundering sophistication into three tiers: basic attackers make direct transfers to centralized exchanges with minimal obfuscation; mid-tier actors use decentralized exchanges, bridges, MEV bots, and cross-chain swaps; and advanced actors deliberately avoid centralized exchange interactions entirely due to KYC compliance risks. Chainalysis quoted in its report: 'Criminals have recognized that crypto holders are high-value targets because they possess wealth in an instantly and irreversibly transferrable form.' The report further noted that 'home invasions allow criminals to confront victims in a controlled environment where they can compel a transfer of funds,' explaining the tactical shift away from public-space robberies toward residential intrusions.","heading":"Attack Types and Evolving Tactics","severity":"critical","sources":[{"credibility":2,"name":"Violent Wrench Attacks Targeting Crypto Holders — Chainalysis (August 6, 2026)","type":"research","url":"https://www.chainalysis.com/blog/violent-crypto-wrench-attacks-2026/"},{"credibility":2,"name":"CertiK Intel3D H1 2026 Wrench Attacks Report — GlobeNewswire (July 25, 2026)","type":"research","url":"https://www.globenewswire.com/news-release/2026/07/25/3333162/0/en/CertiK-Intel3D-H1-2026-Wrench-Attacks-Report-Reveals-33-Surge-in-Physical-Crypto-Crime-Estimated-Losses-Top-124-Million.html"},{"credibility":3,"name":"Crypto Wrench Attacks Surge Amid Rising Home Invasions — Cryptonomist (July 23, 2026)","type":"news_article","url":"https://en.cryptonomist.ch/2026/07/23/crypto-wrench-attacks-surge/"}]},{"content":"France accounted for 30 of 46 incidents in the Chainalysis dataset and 33 of 52 incidents in the CertiK dataset — approximately 63–65% of the global total. French Interior Minister Laurent Nunez stated in late June 2026 that authorities had documented more than 70 crypto-related violent incidents in total within France since the start of the year, suggesting both reports represent undercounts. Monthly attack rates in France climbed from approximately 1.9 incidents per month in 2025 to approximately 4.6 per month in H1 2026. Incidents spread geographically well beyond Paris to Strasbourg, Marseille, Grenoble, Toulouse, Nantes, and smaller towns with no prior record of such crimes. Chainalysis attributed the concentration to a 2024 alleged breach involving a French tax official in the Paris area who allegedly stole and sold detailed dossiers on high-net-worth cryptocurrency holders, including names, home addresses, phone numbers, asset holdings, and tax records, with criminal intermediaries as alleged buyers. A separate but linked breach at French crypto tax platform Waltio, disclosed in January 2026, exposed tax report data for approximately 50,000 users, including email addresses, crypto profit and loss figures, and year-end asset balances. Hackers associated with the Shiny Hunters group posted the Waltio database on a dark web marketplace on December 24, 2025; Waltio's CEO confirmed an extortion demand arrived on January 21, 2026. Hackers subsequently claimed on BreachForums that stolen Waltio data was directly linked to at least three kidnappings netting a combined $17.1 million. French authorities have launched formal investigations connecting both the tax official breach and the Waltio breach to the attack surge. Europe as a whole recorded 39 of 52 global CertiK-verified incidents.","heading":"France as Global Epicenter","severity":"critical","sources":[{"credibility":2,"name":"More than $30 million stolen in violent crypto attacks in 2026 as France emerges as hotspot — The Block (August 6, 2026)","type":"news_article","url":"https://www.theblock.co/post/410984/more-than-30-million-stolen-in-violent-crypto-attacks-in-2026-as-france-emerges-as-wrench-attack-hotspot-chainalysis"},{"credibility":2,"name":"France Logs 77 Crypto Kidnappings and Extortions Since January, Minister Says — BeInCrypto","type":"news_article","url":"https://beincrypto.com/france-crypto-kidnapping-toll-nunez-plan/"},{"credibility":2,"name":"Hackers extort French crypto company Waltio after pinching data from 50,000 users — DL News","type":"news_article","url":"https://www.dlnews.com/articles/regulation/hackers-extort-french-crypto-firm-waltio/"},{"credibility":2,"name":"French Crypto Tax Platform Waltio Hit by 50,000-User Data Breach — Yahoo Finance","type":"news_article","url":"https://www.yahoo.com/news/articles/french-crypto-tax-platform-waltio-223716733.html"},{"credibility":2,"name":"France Logged 77 Crypto Abduction and Extortion Cases. Tax Data May Explain Why — FinanceFeeds","type":"news_article","url":"https://financefeeds.com/france-logged-77-crypto-abduction-and-extortion-cases-tax-data-may-explain-why/"},{"credibility":2,"name":"Fears spread in France that crypto platform data leak leads to real-world abductions — Cybernews","type":"news_article","url":"https://cybernews.com/security/hackers-say-waltio-leak-linked-to-french-crypto-kidnappings/"},{"credibility":1,"name":"France Crypto Kidnappings: Leaks And Zero Convictions Fuel The Crisis — Forbes (February 14, 2026)","type":"news_article","url":"https://www.forbes.com/sites/digital-assets/2026/02/14/france-crypto-kidnappings-leaks-and-zero-convictions-fuel-the-crisis/"}]},{"content":"Several incidents received significant media documentation in H1 2026. In March 2026, game developer and crypto figure Sillytuna (also identified as Amsel) reported losing approximately $23.6–24 million in Aave-USDC stablecoin on Ethereum in a violent attack in the United Kingdom, reportedly involving weapons, kidnap threats, and physical injuries including cuts described as made with an axe. Blockchain analysts traced the stolen funds moving to DAI on Ethereum, Hyperliquid via Arbitrum (converted to Monero), and Bitcoin via LiFi. Sillytuna publicly offered a 10% bounty for fund recovery. In February 2026, three hooded assailants targeted the Paris-area apartment of Binance France CEO David Prinçay, forcing entry into a neighboring apartment before reaching his residence; Prinçay was not home at the time, and the attackers stole two phones before being arrested approximately two hours later during a second attempted burglary in Hauts-de-Seine. In April 2026, armed intruders bound a mother, two children, and two grandparents in a home in northwest France for several hours, coercing a transfer of approximately $820,000. In an earlier March 2026 incident, attackers posing as police officers coerced approximately $1 million in Bitcoin from a couple in a Paris suburb. A London jury convicted five men for the 52-hour captivity and torture of two unnamed French cryptocurrency millionaires who had traveled to London in July 2025; the victims were forced to transfer $30,000 in cryptocurrency (against a demand of $150,000), and the defendants were found guilty of conspiracy to blackmail and false imprisonment. A separate attack in France targeted a sitting magistrate and her mother, who were held captive for approximately 30 hours in a cryptocurrency ransom plot; five suspects were arrested.","heading":"Notable Documented Incidents","severity":"critical","sources":[{"credibility":2,"name":"Game developer Sillytuna reports losing $24M of crypto in UK wrench attack — Protos","type":"news_article","url":"https://protos.com/game-developer-sillytuna-reports-losing-24m-of-crypto-in-uk-wrench-attack/"},{"credibility":1,"name":"Binance France CEO Home Invasion Adds To Record Crypto Attack Wave — Forbes (February 13, 2026)","type":"news_article","url":"https://www.forbes.com/sites/digital-assets/2026/02/13/binance-france-ceo-home-invasion-adds-to-record-crypto-attack-wave/"},{"credibility":2,"name":"Binance France President Targeted in Armed Kidnapping Attempt — Yahoo News","type":"news_article","url":"https://www.yahoo.com/news/articles/binance-france-president-targeted-armed-195457616.html"},{"credibility":2,"name":"Five Convicted of Imprisoning Crypto Millionaires in London 'Torture' Ordeal — Decrypt","type":"news_article","url":"https://decrypt.co/374889/five-convicted-of-imprisoning-crypto-millionaires-in-london-torture-ordeal"},{"credibility":2,"name":"London jury convicts five over 52-hour crypto torture and blackmail — Cryptopolitan","type":"news_article","url":"https://www.cryptopolitan.com/london-jury-convict-crypto-torture-blackmail/"},{"credibility":2,"name":"French Crypto Millionaires Tortured, Burned and Forced To Pay $30,000 as London Court Convicts Six Men — IBTimes UK","type":"news_article","url":"https://www.ibtimes.co.uk/london-jury-convicts-six-crypto-kidnapping-1812152"},{"credibility":2,"name":"Crypto Wrench Attacks Cause Over $30M Losses in H1 as France Tops — The Coin Republic (August 7, 2026)","type":"news_article","url":"https://www.thecoinrepublic.com/2026/08/07/crypto-wrench-attacks-cause-over-30m-losses-in-h1-as-france-tops/"}]},{"content":"The Chainalysis and CertiK reports identify several overlapping mechanisms by which attackers selected victims. The French tax official data theft stands as the most structurally significant: the alleged theft and resale of government tax files provided names, addresses, phone numbers, and asset-level holdings for high-net-worth crypto holders, effectively creating a pre-qualified target list for criminal networks. The Waltio breach — which the platform's own CEO confirmed was not discovered internally until weeks after the data appeared on dark web markets — provided overlapping information including portfolio balances and email identifiers for 50,000 users. Chainalysis's report and security commentators also cited social media disclosure as a persistent enabling factor: public posts about portfolio sizes, transaction screenshots, event attendance, and asset appreciation alerts allow threat actors to infer wealth without any breach. On-chain data analysis also features as a targeting vector, with researchers noting that linking wallet addresses to real identities through public blockchain explorers, exchange withdrawal records, or NFT ownership allows determined actors to estimate target net worth. Chainalysis identified public disclosure of crypto holdings as 'the single highest-correlation protective factor,' reducing inferable targeting risk more than any technical wallet configuration.","heading":"How Attackers Identified Targets","severity":"high","sources":[{"credibility":2,"name":"Violent Wrench Attacks Targeting Crypto Holders — Chainalysis (August 6, 2026)","type":"research","url":"https://www.chainalysis.com/blog/violent-crypto-wrench-attacks-2026/"},{"credibility":2,"name":"Crypto Wrench Attacks Top $30M as France Emerges as Hotspot — CryptoTimes (August 6, 2026)","type":"news_article","url":"https://www.cryptotimes.io/2026/08/06/crypto-wrench-attacks-top-30m-as-france-emerges-as-hotspot/"},{"credibility":2,"name":"Hackers extort French crypto company Waltio after pinching data from 50,000 users — DL News","type":"news_article","url":"https://www.dlnews.com/articles/regulation/hackers-extort-french-crypto-firm-waltio/"},{"credibility":1,"name":"France Crypto Kidnappings: Leaks And Zero Convictions Fuel The Crisis — Forbes","type":"news_article","url":"https://www.forbes.com/sites/digital-assets/2026/02/14/france-crypto-kidnappings-leaks-and-zero-convictions-fuel-the-crisis/"}]},{"content":"The French government's response accelerated significantly in the first half of 2026. By mid-year, French organized-crime prosecutors had recorded approximately 200 arrests, 88 formal indictments, and 75 suspects held in pretrial detention across at least 12 separate investigations. In April 2026, French authorities charged 88 suspects in a coordinated operation; more than ten of those charged were minors, reflecting organized gang recruitment patterns. Interior Minister Laurent Nunez publicly acknowledged the scope of the crisis in late June 2026. In the United Kingdom, the Inner London Crown Court convicted five men for the 52-hour captivity of two French cryptocurrency millionaires; separately, five men were sentenced in Hertfordshire for a wrench attack against a local crypto holder. Investigators in France have formally linked both the tax official data theft and the Waltio breach to specific attack clusters. Despite the enforcement action, early reporting noted 'zero convictions' for the most serious offenses in France as of February 2026, suggesting the arrest and indictment figures had yet to translate into final court judgments by mid-year. Internationally, Chainalysis and CertiK both noted that cross-border coordination remains a challenge, particularly given that proceeds are often laundered through multi-chain paths designed to obscure origins.","heading":"Law Enforcement Response","severity":"high","sources":[{"credibility":2,"name":"France Logs 77 Crypto Kidnappings and Extortions Since January, Minister Says — BeInCrypto","type":"news_article","url":"https://beincrypto.com/france-crypto-kidnapping-toll-nunez-plan/"},{"credibility":1,"name":"France Crypto Kidnappings: Leaks And Zero Convictions Fuel The Crisis — Forbes (February 14, 2026)","type":"news_article","url":"https://www.forbes.com/sites/digital-assets/2026/02/14/france-crypto-kidnappings-leaks-and-zero-convictions-fuel-the-crisis/"},{"credibility":2,"name":"Crypto: Three people arrested after an attack targeting a Binance France executive — CoinTribune","type":"news_article","url":"https://www.cointribune.com/en/crypto-three-people-arrested-after-an-attack-targeting-a-binance-france-executive/"},{"credibility":1,"name":"Five sentenced for wrench attack on Herts man — Hertfordshire Police","type":"official","url":"https://www.herts.police.uk/news/hertfordshire/news/2026/may-2026/five-sentenced-for-wrench-attack-on-herts-man/"},{"credibility":2,"name":"Five Convicted of Imprisoning Crypto Millionaires in London 'Torture' Ordeal — Decrypt","type":"news_article","url":"https://decrypt.co/374889/five-convicted-of-imprisoning-crypto-millionaires-in-london-torture-ordeal"}]},{"content":"Both the Chainalysis and CertiK reports, as well as security practitioners cited in contemporaneous coverage, offer a consistent set of recommendations. Operational security and information minimization are consistently ranked as the highest-impact protective measures: avoiding any public disclosure of cryptocurrency holdings, on social media or otherwise, and refraining from linking on-chain wallet addresses to real-world identities are described by Chainalysis as the single most effective risk-reduction practices. Technical custody mitigations include multi-signature wallet configurations with geographically dispersed co-signers, time-delayed or staged withdrawals that prevent immediate large transfers under duress, multi-party computation (MPC) setups, and separation of hot and cold storage with different physical access requirements. Family preparedness protocols are specifically mentioned by CertiK, given the documented shift toward targeting family members to coerce primary holders. Physical security measures appropriate to individual risk profiles are recommended but not specified in detail in public reports. Chainalysis noted that the 2026 attack wave represents a fundamental challenge to the industry's security posture because it 'bypasses digital security controls entirely,' meaning technically sophisticated wallet configurations offer limited protection once attackers gain physical control of a victim or their family members. Emergency response plans designed to withstand physical coercion — such as duress codes and pre-arranged law enforcement contacts — are also mentioned.","heading":"Protective Recommendations","severity":"high","sources":[{"credibility":2,"name":"Violent Wrench Attacks Targeting Crypto Holders — Chainalysis (August 6, 2026)","type":"research","url":"https://www.chainalysis.com/blog/violent-crypto-wrench-attacks-2026/"},{"credibility":2,"name":"CertiK Intel3D H1 2026 Wrench Attacks Report — GlobeNewswire (July 25, 2026)","type":"research","url":"https://www.globenewswire.com/news-release/2026/07/25/3333162/0/en/CertiK-Intel3D-H1-2026-Wrench-Attacks-Report-Reveals-33-Surge-in-Physical-Crypto-Crime-Estimated-Losses-Top-124-Million.html"},{"credibility":2,"name":"Physical Crypto Attacks Hit $124M In H1 2026, A Record High — Yellow.com Research","type":"research","url":"https://yellow.com/research/crypto-physical-attacks-surge-wrench-season-2026"},{"credibility":2,"name":"Crypto Wrench Attacks Exposed $124M in H1 2026: CertiK Report — CryptoTimes (July 23, 2026)","type":"news_article","url":"https://www.cryptotimes.io/2026/07/23/crypto-wrench-attacks-exposed-124m-in-h1-2026-certik-report/"}]},{"content":"The H1 2026 figures represent a sharp acceleration from an already-rising trend. CertiK documented 72 wrench attack incidents across the full year of 2025, with total financial losses of $40.9 million. H1 2025 alone recorded 39 incidents with $10.5 million in financial exposure. The full-year 2025 record of $58 million in confirmed losses has already been surpassed on a half-year basis using the broader CertiK exposure methodology. In 2024, the success rate of attacks — the proportion that resulted in a transfer of funds — was 67% (32 of 48 incidents); by H1 2026 that rate had fallen to 26% (12 of 46 incidents), suggesting both improved victim resistance and more deterred or interdicted attacks, even as absolute incident counts and amounts stolen rise. Home invasions grew from representing 26% of incidents in 2023 to 37–41% in H1 2026. CoinDesk reporting from February 2026 cited a 75% year-over-year increase in wrench attacks for early 2026 versus the same period in 2025. The 2025 Skynet Wrench Attacks Report from CertiK provided prior-year baseline data that serves as the comparison baseline for the 2026 figures. Researchers noted that France was already the leading nation for such attacks in 2025 (at 19 incidents, ahead of the United States at 8), and the 2026 figures represent a further concentration rather than a geographic dispersal.","heading":"Historical Comparison and Prior Years","severity":"high","sources":[{"credibility":2,"name":"CertiK's H1 2026 Wrench Attacks Report Finds $124 Million in Losses — CoinDesk press release (July 22, 2026)","type":"news_article","url":"https://www.coindesk.com/press-release/2026/07/22/certik-s-h1-2026-wrench-attacks-report-finds-usd124-million-in-losses-as-physical-coercion-attacks-surge-33"},{"credibility":2,"name":"Crypto crime is getting violent: wrench attacks jumped 75% in 2026 — CoinDesk (February 2, 2026)","type":"news_article","url":"https://www.coindesk.com/markets/2026/02/02/crypto-crime-is-getting-violent-wrench-attacks-jumped-75-in-2026"},{"credibility":2,"name":"2025 Skynet Wrench Attacks Report — CertiK (Adobe InDesign PDF)","type":"research","url":"https://indd.adobe.com/view/publication/6d3da0d7-c0a0-4b26-baf8-e2f2383c0d32/xhyu/publication-web-resources/pdf/2025_Skynet_Wrench_Attacks_Report_.pdf"},{"credibility":3,"name":"Wrench Attacks Steal $30M in H1 2026, On Track for Record — GNCrypto News","type":"news_article","url":"https://www.gncrypto.news/news/wrench-attacks-30m-h1-2026-on-track-record/"},{"credibility":3,"name":"France Emerges As Global Epicenter For Crypto Kidnappings — StockTwits News","type":"news_article","url":"https://stocktwits.com/news-articles/markets/cryptocurrency/france-emerges-as-global-epicenter-for-crypto-kidnappings/cZRBd3JR4tD"}]}],"sources_used":[{"credibility":2,"name":"Violent Wrench Attacks Targeting Crypto Holders — Chainalysis (August 6, 2026)","type":"research","url":"https://www.chainalysis.com/blog/violent-crypto-wrench-attacks-2026/"},{"credibility":2,"name":"CertiK Intel3D H1 2026 Wrench Attacks Report — GlobeNewswire (July 25, 2026)","type":"research","url":"https://www.globenewswire.com/news-release/2026/07/25/3333162/0/en/CertiK-Intel3D-H1-2026-Wrench-Attacks-Report-Reveals-33-Surge-in-Physical-Crypto-Crime-Estimated-Losses-Top-124-Million.html"},{"credibility":2,"name":"2026 Wrench Attacks Overview — CertiK Blog","type":"research","url":"https://www.certik.com/blog/2026-wrench-attacks-overview"},{"credibility":2,"name":"Crypto Wrench Attacks on Pace for Record Year as $30M Stolen in 2026: Chainalysis — Decrypt","type":"news_article","url":"https://decrypt.co/375014/crypto-wrench-attacks-30m-stolen-2026-chainalysis"},{"credibility":2,"name":"More than $30 million stolen in violent crypto attacks in 2026 as France emerges as hotspot — The Block","type":"news_article","url":"https://www.theblock.co/post/410984/more-than-30-million-stolen-in-violent-crypto-attacks-in-2026-as-france-emerges-as-wrench-attack-hotspot-chainalysis"},{"credibility":2,"name":"CertiK's H1 2026 Wrench Attacks Report Finds $124 Million in Losses — CoinDesk (July 22, 2026)","type":"news_article","url":"https://www.coindesk.com/press-release/2026/07/22/certik-s-h1-2026-wrench-attacks-report-finds-usd124-million-in-losses-as-physical-coercion-attacks-surge-33"},{"credibility":2,"name":"Crypto crime is getting violent: wrench attacks jumped 75% in 2026 — CoinDesk (February 2, 2026)","type":"news_article","url":"https://www.coindesk.com/markets/2026/02/02/crypto-crime-is-getting-violent-wrench-attacks-jumped-75-in-2026"},{"credibility":2,"name":"Violent crypto attacks surge in 2026 with over $124M in financial exposure — CryptoBriefing","type":"news_article","url":"https://cryptobriefing.com/violent-crypto-attacks-surge-2026-france/"},{"credibility":1,"name":"Binance France CEO Home Invasion Adds To Record Crypto Attack Wave — Forbes (February 13, 2026)","type":"news_article","url":"https://www.forbes.com/sites/digital-assets/2026/02/13/binance-france-ceo-home-invasion-adds-to-record-crypto-attack-wave/"},{"credibility":1,"name":"France Crypto Kidnappings: Leaks And Zero Convictions Fuel The Crisis — Forbes (February 14, 2026)","type":"news_article","url":"https://www.forbes.com/sites/digital-assets/2026/02/14/france-crypto-kidnappings-leaks-and-zero-convictions-fuel-the-crisis/"},{"credibility":2,"name":"France Logs 77 Crypto Kidnappings and Extortions Since January, Minister Says — BeInCrypto","type":"news_article","url":"https://beincrypto.com/france-crypto-kidnapping-toll-nunez-plan/"},{"credibility":2,"name":"Game developer Sillytuna reports losing $24M of crypto in UK wrench attack — Protos","type":"news_article","url":"https://protos.com/game-developer-sillytuna-reports-losing-24m-of-crypto-in-uk-wrench-attack/"},{"credibility":2,"name":"Hackers extort French crypto company Waltio after pinching data from 50,000 users — DL News","type":"news_article","url":"https://www.dlnews.com/articles/regulation/hackers-extort-french-crypto-firm-waltio/"},{"credibility":2,"name":"French Crypto Tax Platform Waltio Hit by 50,000-User Data Breach — Yahoo Finance","type":"news_article","url":"https://www.yahoo.com/news/articles/french-crypto-tax-platform-waltio-223716733.html"},{"credibility":2,"name":"Fears spread in France that crypto platform data leak leads to real-world abductions — Cybernews","type":"news_article","url":"https://cybernews.com/security/hackers-say-waltio-leak-linked-to-french-crypto-kidnappings/"},{"credibility":2,"name":"Five Convicted of Imprisoning Crypto Millionaires in London 'Torture' Ordeal — Decrypt","type":"news_article","url":"https://decrypt.co/374889/five-convicted-of-imprisoning-crypto-millionaires-in-london-torture-ordeal"},{"credibility":1,"name":"Five sentenced for wrench attack on Herts man — Hertfordshire Police","type":"official","url":"https://www.herts.police.uk/news/hertfordshire/news/2026/may-2026/five-sentenced-for-wrench-attack-on-herts-man/"},{"credibility":2,"name":"Crypto: Three people arrested after an attack targeting a Binance France executive — CoinTribune","type":"news_article","url":"https://www.cointribune.com/en/crypto-three-people-arrested-after-an-attack-targeting-a-binance-france-executive/"},{"credibility":2,"name":"France Logged 77 Crypto Abduction and Extortion Cases. Tax Data May Explain Why — FinanceFeeds","type":"news_article","url":"https://financefeeds.com/france-logged-77-crypto-abduction-and-extortion-cases-tax-data-may-explain-why/"},{"credibility":2,"name":"Binance France President Targeted in Armed Kidnapping Attempt — Yahoo News","type":"news_article","url":"https://www.yahoo.com/news/articles/binance-france-president-targeted-armed-195457616.html"},{"credibility":2,"name":"Physical Crypto Attacks Hit $124M In H1 2026, A Record High — Yellow.com Research","type":"research","url":"https://yellow.com/research/crypto-physical-attacks-surge-wrench-season-2026"},{"credibility":2,"name":"2025 Skynet Wrench Attacks Report — CertiK","type":"research","url":"https://indd.adobe.com/view/publication/6d3da0d7-c0a0-4b26-baf8-e2f2383c0d32/xhyu/publication-web-resources/pdf/2025_Skynet_Wrench_Attacks_Report_.pdf"},{"credibility":2,"name":"Crypto Wrench Attacks Top $30M as France Emerges as Hotspot — CryptoTimes (August 6, 2026)","type":"news_article","url":"https://www.cryptotimes.io/2026/08/06/crypto-wrench-attacks-top-30m-as-france-emerges-as-hotspot/"},{"credibility":2,"name":"Crypto wrench attacks steal $30M in first half of 2026: Chainalysis — Crypto.News","type":"news_article","url":"https://crypto.news/crypto-wrench-attacks-steal-30m-in-first-half-of-2026-chainalysis/"},{"credibility":2,"name":"Crypto Wrench Attacks Surge in 2026 as Physical Assaults Cost Investors Over $30 Million — CoinCodex","type":"news_article","url":"https://coincodex.com/article/88963/crypto-wrench-attacks-surge-in-2026-as-physical-assaults-cost-investors-over-30-million/"}],"summary":"In H1 2026, physical coercion attacks ('wrench attacks') targeting cryptocurrency holders reached record levels, with Chainalysis documenting 46 incidents and over $30 million in confirmed losses, while CertiK's parallel Intel3D report verified 52 incidents and $124 million in total financial exposure. France emerged as the global epicenter, accounting for 33 of 52 verified incidents, largely attributed to a 2024 theft of tax records by a French government official and a separate breach of crypto tax platform Waltio affecting 50,000 users. The attack wave is on pace to surpass every prior full-year record and represents a structural shift in crypto crime toward physical coercion that bypasses on-chain security entirely.","timeline":[{"date":"2024-01-01","event":"Alleged theft of high-net-worth crypto holder dossiers by a French tax official in the Paris area, according to Chainalysis; the dossiers allegedly contained names, addresses, phone numbers, asset holdings, and tax records.","source":"Chainalysis H1 2026 Wrench Attack Report (August 6, 2026)","source_url":"https://www.chainalysis.com/blog/violent-crypto-wrench-attacks-2026/"},{"date":"2025-07-01","event":"Two unnamed French cryptocurrency millionaires are held captive for 52 hours in London and tortured; they are forced to transfer $30,000 in cryptocurrency before escaping. Five men are later convicted at Inner London Crown Court.","source":"Decrypt — Five Convicted of Imprisoning Crypto Millionaires in London 'Torture' Ordeal","source_url":"https://decrypt.co/374889/five-convicted-of-imprisoning-crypto-millionaires-in-london-torture-ordeal"},{"date":"2025-12-24","event":"Stolen Waltio user database (50,000 accounts including 2024 tax report data) appears on a dark web marketplace, attributed to the Shiny Hunters group; Waltio is not yet aware of the breach.","source":"DL News — Hackers extort French crypto company Waltio","source_url":"https://www.dlnews.com/articles/regulation/hackers-extort-french-crypto-firm-waltio/"},{"date":"2026-01-21","event":"Waltio CEO Pierre Morizot confirms the company received an extortion demand from hackers who had stolen 50,000 user records; the breach is publicly disclosed, accelerating the monthly attack rate in France from approximately 1.9 to 4.6 incidents per month.","source":"Yahoo Finance — French Crypto Tax Platform Waltio Hit by 50,000-User Data Breach","source_url":"https://www.yahoo.com/news/articles/french-crypto-tax-platform-waltio-223716733.html"},{"date":"2026-02-02","event":"CoinDesk reports a 75% year-over-year increase in wrench attacks for early 2026 versus the same period in 2025, citing growing industry alarm.","source":"CoinDesk — Crypto crime is getting violent: wrench attacks jumped 75% in 2026","source_url":"https://www.coindesk.com/markets/2026/02/02/crypto-crime-is-getting-violent-wrench-attacks-jumped-75-in-2026"},{"date":"2026-02-12","event":"Three hooded attackers target the Paris-area apartment of Binance France CEO David Prinçay; they enter the wrong unit first, steal two phones from Prinçay's residence (he is not home), and are arrested approximately two hours later during a second attempted burglary in Hauts-de-Seine.","source":"Forbes — Binance France CEO Home Invasion Adds To Record Crypto Attack Wave","source_url":"https://www.forbes.com/sites/digital-assets/2026/02/13/binance-france-ceo-home-invasion-adds-to-record-crypto-attack-wave/"},{"date":"2026-03-01","event":"Attackers posing as police officers coerce approximately $1 million in Bitcoin from a couple in a Paris suburb.","source":"Decrypt — Crypto Wrench Attacks on Pace for Record Year as $30M Stolen in 2026: Chainalysis","source_url":"https://decrypt.co/375014/crypto-wrench-attacks-30m-stolen-2026-chainalysis"},{"date":"2026-03-05","event":"Game developer Sillytuna (Amsel) reports losing approximately $23.6–24 million in cryptocurrency in a violent UK attack involving weapons, kidnap threats, and physical injuries; stolen funds are traced moving across Ethereum, Arbitrum, Hyperliquid, and Bitcoin via cross-chain bridges.","source":"Protos — Game developer Sillytuna reports losing $24M of crypto in UK wrench attack","source_url":"https://protos.com/game-developer-sillytuna-reports-losing-24m-of-crypto-in-uk-wrench-attack/"},{"date":"2026-04-01","event":"Armed intruders bind a mother, two children, and two grandparents in a home in northwest France for several hours, forcing a cryptocurrency transfer of approximately $820,000.","source":"Decrypt — Crypto Wrench Attacks on Pace for Record Year","source_url":"https://decrypt.co/375014/crypto-wrench-attacks-30m-stolen-2026-chainalysis"},{"date":"2026-04-01","event":"French authorities charge 88 suspects across 12 investigations targeting organized gangs responsible for crypto-linked violent attacks; more than ten of those charged are minors.","source":"Decrypt — Crypto Wrench Attacks on Pace for Record Year","source_url":"https://decrypt.co/375014/crypto-wrench-attacks-30m-stolen-2026-chainalysis"},{"date":"2026-06-01","event":"French Interior Minister Laurent Nunez states that authorities have documented more than 70 crypto-related violent incidents in France since the start of the year; by this point approximately 200 arrests, 88 indictments, and 75 suspects in pretrial detention have been recorded.","source":"BeInCrypto — France Logs 77 Crypto Kidnappings and Extortions Since January, Minister Says","source_url":"https://beincrypto.com/france-crypto-kidnapping-toll-nunez-plan/"},{"date":"2026-07-22","event":"CertiK publishes its Intel3D H1 2026 Wrench Attacks Report, documenting 52 verified global incidents and $124.18 million in total financial exposure, a 33% year-over-year increase in incidents and an 11.8-fold increase in financial exposure.","source":"GlobeNewswire — CertiK Intel3D H1 2026 Wrench Attacks Report (July 25, 2026)","source_url":"https://www.globenewswire.com/news-release/2026/07/25/3333162/0/en/CertiK-Intel3D-H1-2026-Wrench-Attacks-Report-Reveals-33-Surge-in-Physical-Crypto-Crime-Estimated-Losses-Top-124-Million.html"},{"date":"2026-08-06","event":"Chainalysis publishes its H1 2026 wrench attack blog post, documenting 46 incidents and over $30 million in confirmed losses; identifies France as the global hotspot and links the surge to the 2024 alleged tax official data theft.","source":"Chainalysis — Violent Wrench Attacks Targeting Crypto Holders","source_url":"https://www.chainalysis.com/blog/violent-crypto-wrench-attacks-2026/"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 71796093-f2bf-49f9-851c-f4d0508c9eeccopy