CertiK, a blockchain security firm, said on Wednesday that 52 confirmed physical attacks on cryptocurrency holders had occurred in the first half of 2026. The amount of funds at risk was about $124.1 million, up from $10.5 million the previous year.
Nowadays, there is a much more common and much more costly threat to anyone with a known identity and real cryptocurrencies.
There were 52 confirmed incidents, an increase of 33.3% year-on-year from the 39 cases in the first half of 2025. CertiK defines a key attack as any form of violence, intimidation or credible threat used to force someone to transfer digital assets, provide private keys, or open a wallet.
This tactic is “an established threat vector for cryptocurrency holders,” Certek said. It even makes for strong digital security because it attacks the person, not the software.
France leads the wave of painful attacks in Europe
Of the 52 confirmed incidents, 39 occurred in Europe. France alone was home to 33 of them, according to… certec. Europe has already been highlighted as the most risky region for cryptocurrency holders in CertiK’s 2025 Root Attack Report.
Increasingly, victims are being attacked in their homes. CertiK reported that the number of crypto-related home invasions rose from one publicly reported case in the first half of 2025 to 20 cases in the first half of 2026. Kidnappings also increased from 12 to 16 cases.
Elsewhere, there was little movement. There were four cases of torture, as had occurred the previous year. Each period saw one murder linked to a cryptocurrency coercion event.
The increase is due to home invasions. Attackers now discover where targets live instead of waiting to catch them elsewhere.
The exposure figure of $124 million is not stolen cryptocurrencies
The ~$124.1 million figure is an estimated exposure, not a confirmed theft. This includes ransom demands, money paid to victims, and assets that are later frozen by authorities or service providers. Some of this money was never lost.
The average exposure recorded per incident rose from approximately $270,000 in the first half of 2025 to approximately $2.39 million in the first half of 2026. CertiK says its totals are an understatement of the true picture. Victims of attacks often do not report them because they are afraid of being harmed, taxed, or having their reputation damaged.
The total half of the year is obscured by two different phases. This increase led the first quarter of 2026, with 35 incidents compared to 22 incidents in the first quarter of 2025. January saw 15 incidents compared to 9 a year ago, March saw 13 cases compared to 7, and April rose to 8 cases from 2. May and June then dipped below 2025. CertiK attributes this to a combination of improved landlord security, reporting delays, and pressures Law enforcement. The second quarter of 2026 ended with 17 incidents, the same as what happened in the second quarter of 2025.
Extrapolating the first half in a straight line would indicate about 100 incidents for the entire year. Certic cautions that this is not a prediction, especially given the differences between the two quarters.
Cryptopolitan I mentioned This month, 63% of the 164,538 active traders in Robinhood’s top meme coins were underwater. Wrench attacks target a different profile. Owners whose finances and positions are clear enough that they are worth the effort of coercion.
CertiK’s advice is to cut the link between a person’s public identity and their possessions. It is proposed to limit data linking the name, location, or daily pattern of the holder to cryptocurrency ownership. Important assets should be stored so that no one can move them on demand.
Cryptocurrency holders should keep their wallets, signing tools, and recovery data separate. The company also says people should secure their homes, talk to their families about what to do in an emergency, and avoid using sensitive accounts on any devices they take with them when they travel.
Don’t just read cryptocurrency news. Understand that. Subscribe to our newsletter. It’s free.
