Points of Focus

• Reported physical attacks on crypto holders are increasing, with higher levels of violence.
• Price growth explains part of the rise, but user growth changes the risk picture.
• Geography and self-custody practices now shape real-world security exposure.

Physical attacks aimed at forcing crypto holders to hand over keys are no longer rare edge cases. There is a steady rise in reported physical attack incidents, pushing crypto risk beyond screens and wallets into homes, streets, and travel routines.

What long-running wrench attack data shows

Bitcoin security advocate Jameson Lopp has tracked reported wrench attacks for years, building one of the most complete public records of physical coercion linked to crypto theft. The term “wrench attack” is used to describe cases where attackers rely on physical force or threats, rather than technical exploits, to compel victims to hand over private keys or wallet access. That dataset recently received fresh scrutiny from investor and researcher Haseeb Qureshi, who categorized incidents by severity, from minor assaults to fatal outcomes.

Are rates of physical violence against crypto users increasing?

Jameson @lopp has been quietly maintaining a database of "wrench attacks"—violent attacks against crypto users to steal their crypto. It's the closest thing we have to a ground truth of whether holding crypto has… pic.twitter.com/VMmI4ZeC3B

— Haseeb ＞|＜ (@hosseeb) January 4, 2026

His review shows two parallel trends. The total number of reported attacks continues to climb. More concerning, the average severity has increased over time. Attacks that once relied on threats or brief confrontations now more often involve prolonged violence.

Where the violence is rising fastest

The increase is not evenly distributed. Western Europe and parts of the Asia-Pacific region show the sharpest growth in violent incidents. North America remains comparatively safer, yet even there, the absolute number of cases has risen.

This pattern reflects exposure rather than randomness. Regions with dense urban crypto communities, frequent conferences, and visible wealth clusters create more opportunities for targeting. Attackers do not need to breach systems. They need to identify people.

Price explains part of the rise, not all of it

One driver stands out in the data. When attack frequency is compared with total crypto market capitalization, the two move together. A simple regression suggests roughly 45% of the variation in reported attacks can be explained by price levels alone. As crypto becomes more valuable, it attracts more crime.

That explanation breaks down once risk is measured per user. Crypto ownership has expanded far faster than violence. Using active exchange users as a proxy, crypto was riskier on a per-holder basis in 2015 and 2018 than it is today. The recent uptick brings rates closer to 2021 levels, still below earlier peaks.

Why severity matters more than raw counts

Focusing only on attack counts misses how the threat profile is shifting. While physical coercion tied to crypto theft is becoming more severe, several forms of online crypto crime are moving in the opposite direction. 

According to a 2025 report by Web3 security firm Scam Sniffer, phishing losses linked to wallet drainers fell to $83.85 million, down 83% year over year, even as overall market activity increased. The contrast matters. Digital defenses improved faster than physical ones, leaving self-custody holders more exposed in the real world as prices recovered.

What this trend signals going into 2026

The data does not show crypto becoming uniformly more dangerous. It shows risk concentrating around visibility, custody choices, and geography. For holders managing meaningful value, personal security now sits alongside key management as part of the threat model.

This is not a theoretical debate. As prices rise again, the incentives behind wrench attacks strengthen. The open question for 2026 is whether crypto culture adapts its security norms as fast as its market value grows.