Physical attack archive

Crypto wrench attacks on holders

Self-custody removes counterparty risk, but it shifts the attack surface from the exchange to you. This is a chronological record of documented $5-wrench attacks — home invasions, kidnappings, mutilations and coerced transfers — targeting crypto holders worldwide. Reviewed October 30, 2026; dated outcomes are not live case-status updates.

30
Incidents tracked
14
Countries affected
2017–2026
Years covered
2
Murder cases

All incidents, latest first

MediumHome Invasion

Couple in their sixties (parents of a crypto-sector worker)

Location:Mont-de-Marsan, France
Date:October 22, 2026
Loss / demand:Crypto loss undisclosed; laptop stolen

Three masked intruders entered the couple’s home at about 3 a.m., restrained them with tape and cable ties and reportedly demanded cryptocurrency. The 63-year-old husband was struck on the head; a laptop was stolen.

Outcome
The couple were hospitalized. Bayonne judicial police investigated; the three intruders were at large in October 22 reporting. Their son was placed under police protection.
Source reporting ↗
HighHome Invasion

Kutay Aslan and a household worker

Location:Nong Prue, Pattaya, Thailand
Date:October 6, 2026
Loss / demand:$824K in USDT; additional cash and valuables stolen

Three masked armed intruders assaulted and handcuffed a Turkish businessman and a Myanmar household worker at his villa. Reports describe a forced transfer of $824,000 in Tether, as well as theft of 210,000 baht, five Rolex watches and four phones.

Outcome
Pattaya Provincial Court issued warrants for five suspects. October 11 reporting said they had left Thailand within six hours of the robbery.
Source reporting ↗
MediumHome Invasion

Crypto entrepreneur and partner (repeat targets)

Location:Saint-Jean-de-Védas, France
Date:September 29, 2026
Loss / demand:Attempt thwarted; no reported loss

At about 5 a.m., three masked armed men climbed the property’s fence. A perimeter alarm drove them away before they entered the home. The couple had previously been targeted on April 11, 2026.

Outcome
Three suspects aged 19, 30 and 38 were arrested. Castelnau-le-Lez investigators handled the case.
Source reporting ↗
MediumHome Invasion

Family of four (father works in crypto IT)

Location:Vendin-le-Vieil, France
Date:September 20, 2026
Loss / demand:~€40K (~$46K)

Four masked men forced entry at about 4 a.m., restrained a couple and their children aged 8 and 12, and assaulted the father while demanding access to his cryptocurrency accounts. About €40,000 in crypto was taken during the roughly three-hour ordeal; the father and 12-year-old daughter were injured.

Outcome
An investigation into unlawful confinement and organized extortion was opened. Four suspects were still being sought in September 21 reporting.
Source reporting ↗
CriticalMurder

Musician Jonathan Meléndez and family

Location:Atizapán de Zaragoza, Mexico
Date:September 1, 2026
Loss / demand:Undisclosed

Prosecutors alleged that two men killed musician Jonathan Meléndez, his pregnant wife, their three-year-old daughter and a household worker while searching for a cold wallet they believed contained millions of dollars in Bitcoin. Authorities had not publicly confirmed the wallet’s existence or any crypto loss.

Outcome
Two suspects were arrested and placed before judicial authorities in early September; the crypto-robbery motive remained an investigative allegation.
Source reporting ↗
CriticalTorture / Mutilation

Two French crypto millionaires

Location:France
Date:August 2026 (reported August 3)
Loss / demand:~$30K taken of $150K demanded

Two holders were held for 52 hours, beaten, set on fire and threatened with death unless they surrendered their crypto. They handed over about $30,000 of the $150,000 the gang demanded.

Outcome
A high-speed police chase ended the ordeal. Six people were prosecuted.

Legacy entry — individual source not yet rechecked.

HighHome Invasion

Couple in Le Chesnay (near Versailles)

Location:Le Chesnay, France
Date:March 9, 2026
Loss / demand:~€900K (~$1M) in BTC

Three men posing as police officers talked their way into a home west of Paris, then held a knife to the woman and threatened to stab her unless her partner transferred Bitcoin to the gang's wallet.

Outcome
Funds transferred. Treated by investigators as organised crypto-targeted home invasion.

Legacy entry — individual source not yet rechecked.

MediumHome Invasion

CEO of Binance France

Location:Paris suburbs, France
Date:February 12, 2026
Loss / demand:No crypto lost

Assailants entered the wrong residence before reaching their intended target — reported by French media as the head of Binance France — indicating prior reconnaissance rather than opportunism. Two phones were stolen.

Outcome
Binance confirmed an employee was targeted and that the family is safe. Suspects arrested at Lyon Perrache station.

Legacy entry — individual source not yet rechecked.

CriticalHome Invasion

Family in Grant, Minnesota

Location:Grant, Minnesota, USA
Date:September 19, 2025
Loss / demand:More than $8M in crypto

Two brothers travelled from Texas to Minnesota, forced entry into a family home, restrained the family with zip ties at gunpoint and demanded access to the victim's crypto accounts.

Outcome
On October 29, 2026, Isiah Angelo Garcia was sentenced to 15.5 years and Raymond Christian Garcia to 15 years in federal prison after guilty pleas to interference with commerce by robbery.
Source reporting ↗
HighArmed Robbery

Crypto trader

Location:Houston, Texas, USA
Date:June 9, 2025
Loss / demand:~$1.2M

Trader was followed home from an OTC meeting, held at gunpoint and forced to drain a hot wallet and his MetaMask seed phrase backup.

Outcome
Houston PD opened an investigation; partial on-chain freeze via Tether and Circle.

Legacy entry — individual source not yet rechecked.

CriticalTorture / Mutilation

Michael Valentino Teofrasto Carturan

Location:New York City, USA
Date:May 23, 2025
Loss / demand:Wallet password targeted

Italian crypto investor held for 17 days in a Manhattan townhouse, tortured with electric shocks and dangled from a rooftop to force him to surrender his Bitcoin wallet keys.

Outcome
Victim escaped. John Woeltz and accomplices arrested and charged with kidnapping and assault.

Legacy entry — individual source not yet rechecked.

MediumAbduction (Family Member)

Father of Pierre Noizat (Paymium CEO)

Location:Paris, France
Date:May 13, 2025
Loss / demand:Ransom demanded, not paid

Masked men attempted to force a man and his daughter into a van in broad daylight in the 11th arrondissement. The family fought back and bystanders intervened.

Outcome
Abduction failed. Five suspects later arrested by French police.

Legacy entry — individual source not yet rechecked.

MediumAbduction (Family Member)

Father of crypto influencer (Mougins)

Location:Vesoul / Mougins, France
Date:May 1, 2025
Loss / demand:€5–7M ransom demanded

Father of a French crypto entrepreneur was kidnapped and held in a van. Captors cut off part of one of his fingers to pressure the family for a multi-million-euro ransom in crypto.

Outcome
Rescued by French police within days; multiple arrests across France and Morocco.

Legacy entry — individual source not yet rechecked.

MediumAbduction (Family Member)

Crypto influencer's parents

Location:Belgium
Date:March 14, 2025
Loss / demand:Crypto ransom demanded

Parents of a Belgium-based crypto influencer were targeted in a violent abduction attempt at their home; attackers fled when neighbours intervened.

Outcome
Police-protected; multiple suspects under investigation linked to France network.

Legacy entry — individual source not yet rechecked.

MediumAbduction (Family Member)

Father of crypto millionaire

Location:Le Vésinet, France
Date:January 25, 2025
Loss / demand:€5M ransom demanded

Father of a French crypto entrepreneur was abducted from his home; captors demanded a multi-million-euro crypto ransom.

Outcome
Rescued by French police after a few days; suspects arrested.

Legacy entry — individual source not yet rechecked.

CriticalTorture / Mutilation

David Balland (Ledger co-founder)

Location:Méreau, France
Date:January 21, 2025
Loss / demand:~€10M ransom demand

Balland and his partner were kidnapped from their home. Attackers cut off one of his fingers and sent the video to Ledger CEO Pascal Gauthier to coerce a crypto ransom payment.

Outcome
GIGN rescued both victims within 48 hours. Ten suspects arrested; ransom not paid.

Legacy entry — individual source not yet rechecked.

MediumHome Invasion

Crypto holder (Saint-Maur-des-Fossés)

Location:Île-de-France, France
Date:January 11, 2025
Loss / demand:Forced wallet transfers

Armed intruders broke into a family home, restrained the residents and forced them to log in to crypto exchanges and self-custody wallets.

Outcome
Part of a wider France-wide crackdown on crypto-targeted home invasions in early 2025.

Legacy entry — individual source not yet rechecked.

HighKidnapping

Dean Skurka (WonderFi CEO)

Location:Toronto, Canada
Date:November 1, 2024
Loss / demand:C$1M ransom paid

Skurka was pulled into a vehicle in downtown Toronto and released after a ransom was wired electronically.

Outcome
Released same evening. Police investigation ongoing.

Legacy entry — individual source not yet rechecked.

MediumKidnapping

Crypto entrepreneur

Location:Hyderabad, India
Date:July 31, 2024
Loss / demand:~$230K

Businessman was abducted by men posing as CBI officers and forced to transfer USDT from his wallets before being released.

Outcome
Telangana cyber-crime unit arrested multiple suspects.

Legacy entry — individual source not yet rechecked.

HighHome Invasion

Crypto investor

Location:Florida, USA
Date:July 3, 2024
Loss / demand:~$4M

Home invasion crew tied up the victim and his family in their Florida home and forced him to transfer ~$4M in BTC and ETH to attacker-controlled wallets.

Outcome
FBI investigation; funds traced through mixers.

Legacy entry — individual source not yet rechecked.

MediumHome Invasion

Crypto holder

Location:Sentosa, Singapore
Date:April 14, 2024
Loss / demand:Targeted attack

Intruders broke into a luxury home on Sentosa Cove targeting the owner's crypto holdings; victim restrained while wallets were accessed.

Outcome
Singapore Police Force investigation; victim survived with non-life-threatening injuries.

Legacy entry — individual source not yet rechecked.

MediumHome Invasion

Bitcoin OG (Toronto)

Location:Toronto, Canada
Date:March 16, 2024
Loss / demand:Family threatened

Three masked intruders broke into the home of an early Bitcoin investor, restraining family members and demanding access to hardware wallets.

Outcome
Family unharmed thanks to a passphrase-protected wallet. Toronto Police investigation ongoing.

Legacy entry — individual source not yet rechecked.

HighKidnapping

Crypto trader

Location:Dubai, UAE
Date:September 23, 2022
Loss / demand:~$500K

Trader was lured to an in-person OTC deal, abducted in a van, beaten and forced to transfer USDT before being released in the desert.

Outcome
Dubai Police arrested multiple suspects; partial recovery via Tether freeze.

Legacy entry — individual source not yet rechecked.

MediumArmed Robbery

Bitcoin holder

Location:Hong Kong
Date:June 11, 2022
Loss / demand:~HK$3M

Victim was lured to a Wan Chai apartment for an in-person OTC trade. He was beaten and forced to transfer Bitcoin to attackers.

Outcome
Hong Kong Police arrested several suspects; partial recovery.

Legacy entry — individual source not yet rechecked.

MediumHome Invasion

Zaryn Dentzel (Tuenti founder)

Location:Madrid, Spain
Date:September 2021
Loss / demand:Crypto access targeted

Dentzel was tied up and beaten in his Madrid home by intruders who demanded access to his cryptocurrency holdings.

Outcome
Dentzel survived; Spanish police investigation ongoing, no full recovery.

Legacy entry — individual source not yet rechecked.

CriticalArmed Robbery

Crypto investor

Location:Mumbai, India
Date:August 14, 2021
Loss / demand:~₹80 crore

Investor Shailesh Bhatt alleged he was abducted by police officers who extorted Bitcoin and Ethereum from him over multiple days.

Outcome
CID Gujarat arrested several officers; landmark case in Indian crypto extortion law.

Legacy entry — individual source not yet rechecked.

CriticalMurder

Anne-Elisabeth Falkevik Hagen

Location:Lørenskog, Norway
Date:October 31, 2018
Loss / demand:€9M Monero ransom demand

Wife of one of Norway's wealthiest investors disappeared from her home. A ransom note demanded payment in Monero. Case became Norway's most high-profile crypto-linked crime.

Outcome
Husband Tom Hagen was arrested in 2020 on suspicion of murder; case remains unresolved.

Legacy entry — individual source not yet rechecked.

HighArmed Robbery

Crypto investor (Manhattan)

Location:New York City, USA
Date:February 5, 2018
Loss / demand:~$1.8M ETH

Investor was forced at gunpoint by an acquaintance into transferring ETH from his Authy-secured account during a meeting.

Outcome
Suspect arrested by NYPD shortly after; funds partially traced.

Legacy entry — individual source not yet rechecked.

MediumHome Invasion

Bitcoin trader (Oxford, UK)

Location:Moulsford, Oxfordshire, UK
Date:January 21, 2018
Loss / demand:Forced transfer attempted

Four armed men in balaclavas broke into a trader's home, threatened his pregnant wife at gunpoint and forced him to transfer Bitcoin from his accounts.

Outcome
Family unharmed; investigation by Thames Valley Police, no public arrests.

Legacy entry — individual source not yet rechecked.

HighKidnapping

Pavel Lerner (Exmo analyst)

Location:Kyiv, Ukraine
Date:December 26, 2017
Loss / demand:$1M BTC ransom

Lerner was forced into a black Mercedes outside the Exmo office. Captors held him until a Bitcoin ransom was paid.

Outcome
Released after several days; Lerner declined to detail the incident publicly.

Legacy entry — individual source not yet rechecked.

How to harden yourself against a wrench attack

  • Passphrases are not a physical-safety guarantee. A passphrase creates a separate wallet, but attackers may know that hidden wallets exist. A decoy or refusal can escalate violence; prioritize personal safety and professional security advice rather than relying on technical tricks.
  • Never flex on-chain or on social media. Public balances, social-media posts and leaked personal details can help criminals identify targets. Avoid publicly linking your identity, home and holdings.
  • Split custody. Multi-sig (e.g. 2-of-3 across geographic locations) means no single coerced signature can drain your funds.
  • Treat OTC trades as physical-security events. Many incidents — Hong Kong, Dubai, Houston — started with an in-person OTC meeting. Use regulated venues only.
  • Keep KYC data minimal. The 2020 Ledger customer-data breach exposed postal addresses. Minimize unnecessary personal-data sharing and consider how a leak could affect your household.

Pick a wallet that supports passphrases & multi-sig

Our hardware wallet comparison ranks devices by Secure Element design, passphrase support, multi-sig friendliness and supply-chain practices.

See the full comparison →

This selected archive is not exhaustive. New and rechecked entries link to dated reporting; older entries without a link remain marked as not rechecked. Alleged motives, ransom demands and reported losses are distinct; unknown amounts are not confirmed zero losses.

VaultRank

VaultRank is reader-supported. Some outbound links are referral links — they fund the site at no cost to you. © 2026 vaultrank.xyz.

Disclaimer: VaultRank is for informational purposes only and does not constitute financial, investment, or security advice. We accept no liability for any loss or damage arising from the use of this site or reliance on its content. Always do your own research before acting on anything you read here.