---

A couple in their late 50s were robbed of approximately €900,000 (around $1 million USD) in Bitcoin during a violent home invasion in Le Chesnay-Rocquencourt, a suburb west of Paris near Versailles, in the early hours of Monday. Three attackers entered the residence while impersonating police officers, restrained both victims, and coerced the husband into transferring roughly 14.2 BTC, worth approximately $70,828 each at the time, to a wallet controlled by the assailants. The woman eventually freed herself and alerted neighbors around 9:00 AM local time. No suspects have been arrested as of publication. The Versailles prosecutor's office and France's Brigade for the Repression of Banditry (BRB), which coordinates with national intelligence agencies on organized crime cases, are leading the investigation, with potential charges including sequestration, armed robbery by an organized gang, and criminal conspiracy.

This attack belongs to a category researchers call "wrench attacks," a label for crimes where physical force or threats replace technical hacking as the method for stealing digital assets. The Versailles prosecutor's office described what happened in its statement: "[The attackers] forced [the husband] to transfer the Bitcoin...while threatening the pair with a knife." The approach is straightforward: bypassing encryption, seed phrases, and hardware wallets entirely by targeting the person holding them. CertiK, a blockchain security firm, described the pattern in a recent report: stronger digital security has raised the cost of hacking, which pushes criminal networks toward exploiting the human element through physical intimidation instead. An observed pattern across crypto crime data suggests that elevated Bitcoin prices tend to correlate with increased frequency of physical attacks on holders, as higher valuations raise the potential reward for criminals who target individuals directly rather than platforms.

France has become the most targeted country in the world for wrench attacks specifically. According to CertiK's 2025 annual report, global wrench attacks rose 75 percent year over year to 72 verified incidents, generating over $40.9 million in losses. Physical assaults within that category jumped 250 percent. France alone recorded 19 confirmed cases in 2025, more than any other nation. In early 2026, 11 of the 14 wrench attacks tracked globally have occurred in France. The Le Chesnay case is not an anomaly. In January 2025, Ledger co-founder David Balland was abducted from his home in central France; his captors severed a finger and demanded 100 BTC in ransom. The ransom was partially paid in Tether (USDT). Because Tether operates on centralized infrastructure, approximately 95 percent of the transferred funds were subsequently frozen and seized. The rescue operation involved more than 90 officers from France's elite GIGN tactical unit, and ten suspects were arrested in its aftermath. In February 2026, masked men broke into a home in Val-de-Marne searching for David Prinçay, the president of Binance France, who was not present at the time. Police later arrested suspects in Lyon after tracking device signals, and Binance CEO Richard Teng publicly confirmed his colleague's safety. Also in February 2026, a mother and daughter were taken captive in a separate crypto-linked kidnapping in France before being rescued, according to CNN. Taken together, these incidents trace a pattern of escalating violence targeting individuals associated with the cryptocurrency industry.

The Organized Crime Information, Intelligence and Strategic Analysis Service of the French Judicial Police (SIRASCO) has documented more than 40 crypto-linked kidnappings between mid-2023 and the end of 2025, and its investigators have identified a consistent organizational structure behind many of these crimes: overseas organizers plan the attacks, French-based recruiters connect them with local operatives, and young individuals with prior criminal records carry out the physical work. The model mirrors drug trafficking networks and relies heavily on social media surveillance to identify targets. SIRASCO notes that the typical victim is a male aged 20 to 35 who has publicly displayed crypto wealth online. The Le Chesnay couple, both in their late 50s, fall outside that profile, which suggests criminal networks are broadening their targeting criteria.

The implications extend well beyond France. Asia's share of global wrench attacks grew from 31.7 percent in 2024 to 33.3 percent in 2025, with incidents concentrated in Thailand, Hong Kong, and the Philippines. South Asia faces particular exposure: India, Pakistan, and Bangladesh have seen rapid retail crypto adoption, and their communities tend to discuss holdings openly in public-facing Telegram and WhatsApp groups. That kind of digital footprint is precisely what SIRASCO identifies as the primary reconnaissance tool used before physical attacks. India's mandatory crypto tax disclosures, expanded since 2022, also mean a growing number of individuals are formally registered as holders, potentially creating data exposure risk if such records are ever accessed by criminal networks. In Africa, Nigeria, Kenya, and Ghana rank among the world's highest crypto adoption countries per capita, and the transnational crime model described by SIRASCO closely resembles cybercrime structures already operating across West and East Africa. Francophone West Africa presents a more direct concern: countries such as Senegal, Côte d'Ivoire, and Cameroon share cultural and linguistic proximity with metropolitan France, and their growing crypto communities may represent a natural spillover pathway for the crime methodologies that investigators have documented in France.

The security response to this trend is still early-stage. According to crypto.news, of $166 million stolen through physical attacks on crypto holders between 2022 and 2025, approximately $128 million was obtained through kidnapping specifically, illustrating how central the abduction model has become to this category of crime. Practical mitigations include cold storage for significant holdings, avoiding public discussion of portfolio size, and multisignature wallet setups that require multiple approvals before a transfer can complete, making rapid forced transfers structurally difficult. Hardware wallet makers should accelerate the adoption of "duress PIN" features that display a decoy balance under coercion, a capability that would meaningfully reduce a holder's exposure in a forced-transfer scenario. Specialized insurance covering physical crypto theft exists through providers like Lloyd's of London but remains virtually unavailable across South Asia and Africa. If Bitcoin's price continues its historical recovery cycle and retail adoption accelerates in emerging markets, the security gap between on-chain protections and off-chain physical risk is likely to widen before it narrows.