Skip to content
Today
Sections

Topic

Wrench attacks

Physical-world crypto theft in which attackers assault, abduct, or invade a holder's home to force them into revealing keys or transferring funds.

Current stories

investConfirmed4 publishers

UK trader says intruders with knives forced him to hand over $720,000 from a Ledger

Three knife-wielding intruders took about $800,000 from a UK trader, he says, including $720,000 from a Ledger hardware wallet. Police have not confirmed it; Chainalysis counts over $30 million in confirmed losses from such attacks in the first half of 2026.

Publishers:coindesk.com crypto.news cryptopolitan.com news.bitcoin.com

Perspective Coverage

4 publishers
Builder
Builder 18%
Operator
Operator 50%
Investor
Investor 32%

Reality

Evidence45
Adoption
Not scored
Hype gap+15
Incentives
Not scored
Confidence58
investOne report1 publisher

France's €100,000 crypto wallet reporting rule is absent from the budget text the Assembly now debates

France's Assembly finance committee adopted a rule making holders of €100,000 or more in self-custody crypto report it or face fines up to €10,000. The same committee then voted 31 to 3 against the budget's revenue section, and the government's original text contains none of its crypto amendments.

Publishers:decrypt.co

Reality

Evidence50
Adoption
Not scored
Hype gap+25
Incentives40
Confidence55
investOne report1 publisher

Based alerts Singapore's regulator after card dashboard exposes passport data tied to wallets

Based says an October 5 breach of its Visa card dashboard may have exposed passport numbers and home addresses tied to wallets. The company says funds are untouched and has not said how many of its 100,000 registered users are affected.

Publishers:cryptopolitan.com

Reality

Evidence35
Adoption
Not scored
Hype gap
Not scored
Incentives
Not scored
Confidence40
investConfirmed4 publishers

A hardware wallet's real attack surface is its order database, not its air gap

Roughly 40,000 SafePal customers had names, addresses and payment methods exposed, according to Crypto Briefing; the air-gapped device held, the shipping list did not.

Publishers:crowdfundinsider.com cryptobriefing.com cryptopolitan.com decrypt.co

Perspective Coverage

4 publishers
Builder
Builder 24%
Operator
Operator 55%
Investor
Investor 21%

Reality

Evidence75
Adoption
Not scored
Hype gap+10
Incentives40
Confidence70
securityConfirmed8 publishers

SafePal's leaked order book is a target list: 39,798 wallet buyers, with addresses

No seed phrases were touched. What was taken is names, phone numbers and shipping addresses for people known to own a hardware wallet, now advertised on a crime forum.

Publishers:bleepingcomputer.com helpnetsecurity.com infosecurity-magazine.com scworld.com securityaffairs.com securityweek.com thehackernews.com therecord.media

Perspective Coverage

8 publishers
Builder
Builder 21%
Operator
Operator 70%
Investor
Investor 9%

Reality

Evidence62
Adoption
Not scored
Hype gap+10
Incentives55
Confidence68
securityConfirmed4 publishers

Attackers phished Trezor, BitBox and CoinTracking customers through one shared newsletter provider

Brevo says an intruder reached 120 customer accounts and used them to mail phishing from those customers' own domains. Three crypto companies confirmed their newsletter lists were hit. Only one named the provider.

Publishers:bleepingcomputer.com malwarebytes.com securityweek.com therecord.media

Perspective Coverage

4 publishers
Builder
Builder 15%
Operator
Operator 69%
Investor
Investor 16%

Reality

Evidence68
Adoption
Not scored
Hype gap−20
Incentives40
Confidence70
investOne report1 publisher

Casa's security chief maps 360 physical attacks on the people who hold their own keys

Jameson Lopp has turned a GitHub list he has kept since at least 2014 into a filterable map of 360 robberies, kidnappings and assaults on crypto holders. The 2026 entries so far run at about two a week.

Publishers:cryptobriefing.com

Reality

Evidence38
Adoption15
Hype gap+18
Incentives68
Confidence46