What is a crypto wrench attack?
Most families who hold cryptocurrency picture the danger as a hacker on the other side of the world. The threat that grew fastest in 2026 is far more personal: someone at the door who wants you to unlock your own wallet. Security researchers call these “wrench attacks,” after the old joke that nobody needs to break your encryption if they can threaten you with a five-dollar wrench.
The numbers turned sharply. CertiK’s Intel3D report on wrench attacks for the first half of 2026, published in July, counted 52 verified attacks with roughly $124 million at stake, about twelve times the same period a year earlier. The most telling shift was at home: documented home invasions rose from a single case to twenty, roughly four in ten of the verified attacks. Jameson Lopp, whose public log of these attacks reaches back to 2014, had counted around seventy for 2025 by the start of this year, the most of any year, as The Block reported in January 2026. In the best-known case, a co-founder of a French hardware-wallet company and his wife were kidnapped from their home.
Underneath the numbers is a feeling worth naming: not “I might lose money” but “my family could be hurt because of money,” the worry that taking custody of your own savings made your household a target. That worry deserves a plan, not a panic, and the plan is a discipline this site already teaches.
Why the usual crypto advice falls short
The standard guidance is about not losing access: use a hardware wallet, protect your recovery phrase, make sure your heirs can find it. That guidance is right, and it does nothing for this threat. A hardware wallet keeps your keys from a remote thief. It does not help when someone standing over you can make you use it: as CertiK’s report puts it, a cold wallet in the home becomes accessible the moment its owner is forced to unlock it. This is a different problem, and it calls for two defenses the loss-prevention playbook never mentions: staying off the target list, and designing custody so you cannot hand over everything even if you are forced to try.
Two terms this site uses. The FIRM System (Family Information Resource Management) is the organizational system for a family’s information, built so the right people can find the right information at the right time. The SAFE Framework divides that information into four Areas of Focus: System, At-Home, Financial, and Estate. Protecting cryptocurrency is Financial work, and this particular risk reaches straight into your family’s physical safety.
First, keep perspective
These attacks are still rare, and they cluster. Europe accounted for about three-quarters of the verified first-half 2026 cases, France for most of those, and the targets are overwhelmingly people known to hold large amounts. A family with a modest amount of crypto is unlikely to face a home invasion over it. They also fail more often than they succeed: by Chainalysis’s August 2026 count, only about one in four attempts in the first half of the year ended in a payment, down from about half in 2025. So right-size this. The privacy habits below cost nothing and are worth adopting at any level; the heavier custody machinery matters more as your holdings grow. This is preparation, not panic.
The guidance
1. Stay off the target list
Attackers do not pick names at random. They assemble what CertiK’s analysts call a “target package” from leaked databases, exchange records, on-chain activity, and what people reveal about themselves. Make yourself hard to find and hard to size up:
- Say nothing about what you hold. Keep it off social media and out of group chats. Public bragging is reconnaissance for the other side.
- Shrink your data-broker footprint so your home address is harder to buy. Removing yourself from data brokers is the place to start.
2. Design custody so you cannot hand over everything
This is the book’s second principle, Separation of Knowledge and Control, applied to a physical threat. The goal is savings you cannot empty alone, on demand, so that coercion has a ceiling:
- Keep tiers. A small wallet for daily spending, kept separate from long-term savings, limits what is reachable in the moment.
- Require more than yourself. A multi-signature setup, where moving the long-term funds needs a second key you do not carry, means no single person in a single frightened moment can move everything. Time delays on large withdrawals add the same friction. Both are what the researchers who track these attacks recommend, and both make the plan’s promise true: no one person in your home can hand it all over.
3. Make it a family plan, not a personal one
Attackers increasingly pressure relatives as leverage (more than half of this year’s cases by CertiK’s spring count), so this cannot live only in the head of whoever manages the money. Without ever exposing keys, the household should understand the shape of the plan: that savings are tiered and cannot be moved quickly by one person, what to do under threat (comply, give up what is reachable, everyone’s safety before any balance), and where the plan is recorded. Note that the plan exists in the Family Guide, never the keys themselves, the same custody discipline as the Vault Key.
Quick reference
- Say nothing about what you hold: no social media, no group chats, no conference bragging.
- Reduce your data-broker exposure so your address is harder to buy.
- Tier your wallets: a small daily wallet, separate long-term savings.
- Require a second key or a time delay for long-term funds, so nobody can move everything alone or instantly.
- Make it a household plan: safety first, comply under threat, and record that the plan exists (not the keys) in the Family Guide.
- Right-size to your holdings: privacy always, heavier custody as the amount grows.
The takeaway
Self-custody put families in charge of their own money, and that control is worth protecting from both directions. Guard against losing the keys, and also against becoming someone worth finding. You do the second with privacy and with custody that cannot be unwound in a single moment, so that even on the worst day the honest answer to a demand is that you cannot hand it all over. Keep the real priority in view — no balance is worth more than the people in your home.
Not sure where your family stands? The free Recoverability Self-Assessment takes about ten minutes and tells you which Area to start with.