Crypto Wrench Attack Losses Hit $124M in H1 2026, France Worst

The $124.1 million figure is estimated exposure, not confirmed theft. It includes ransom demands, funds victims paid, and assets later frozen by authorities or providers. Some of that money was never lost. The average recorded exposure per incident climbed from about $270,000 in H1 2025 to roughly $2.39 million in H1 2026. CertiK said its totals understate the true picture; victims often do not report attacks because they fear injury, tax liability, or reputational harm.

The half-year total masks two different phases. Q1 2026 had 35 incidents compared with 22 in Q1 2025. January saw 15 cases against 9 a year earlier, and March had 13 versus 7. April shot up to 8 from 2. Then May and June fell below 2025 levels. CertiK attributed the drop to better holder security, reporting delays, and law-enforcement pressure. Q2 2026 ended with 17 incidents, the same as Q2 2025.

Extrapolating the first half in a straight line would imply about 100 incidents for the full year. CertiK warned that is not a prediction, particularly given the divergence between quarters.

Wrench attacks target holders whose money and location are sufficiently visible to make coercion worthwhile. CertiK's advice is to break the link between a person's public identity and their holdings. It recommends limiting data that ties a name, location, or daily routine to cryptocurrency ownership. Significant assets should be stored so no single person can move them on demand. Holders should keep wallets and recovery data separate, secure their homes, and discuss emergency protocols with family.

CertiK also urged avoiding sensitive accounts on any devices taken during travel.