The $6.7M Crypto Wrench Attack: What Happened and Why Physical Crypto Crime Is Rising
A crypto holder reportedly lost about $6.7 million after attackers drained funds from their Kraken and Coinbase accounts—1,554 ETH, 10.5 BTC, and 34.1 cbBTC—with roughly $5.3 million later laundered through Tornado Ca... On‑chain observers tracked the withdrawals from both exchanges before the stolen assets were qui...
A crypto holder reportedly lost about $6.7 million after attackers drained funds from their Kraken and Coinbase accounts—1,554 ETH, 10.5 BTC, and 34.1 cbBTC—with roughly $5.3 million later laundered through Tornado Ca...
On‑chain observers tracked the withdrawals from both exchanges before the stolen assets were quickly moved and partially mixed through Tornado Cash to obscure the trail.
Security researchers say incidents like this are part of a broader shift from technical exploits toward physical coercion and social engineering targeting the human side of crypto security.
What happened in the recent suspected physical “wrench attack” on a crypto user who lost about $6.7 million, including how attackers drainedPhysical coercion attacks targeting crypto holders are rising as criminals bypass technical security and target individuals directly.
AI Prompt
Create a landscape editorial hero image for this Studio Global article: What happened in the recent suspected physical “wrench attack” on a crypto user who lost about $6.7 million, including how attackers drained. Article summary: A crypto user reportedly lost about $6.7 million after a suspected physical “wrench attack,” meaning attackers appear to have coerced access to the victim’s exchange accounts rather than exploiting a smart contract or ex. Topic tags: general, general web. Reference image context from search candidates: Reference image 1: visual subject "New York police officers arrest John Woeltz, Friday, May 23, 2025, in New York, who was charged with kidnapping, assaulting and holding a man against his will for several weeks in" source context "Why 'wrench attacks' on wealthy crypto holders are on the rise" Reference image 2: visual subject "William Duplessie is escorted out
openai.com
A cryptocurrency holder reportedly lost about $6.7 million in a suspected physical “wrench attack,” a type of crime where attackers coerce victims into giving up access to their crypto accounts rather than exploiting software vulnerabilities. The incident involved coordinated withdrawals from both Kraken and Coinbase accounts, followed by rapid laundering of the stolen assets through crypto‑mixing services.
The case illustrates a growing trend in 2026: attackers increasingly target people instead of code, combining intimidation, social engineering, and on‑chain laundering techniques to bypass technical defenses.
How the $6.7 Million Theft Happened
According to on‑chain monitoring reports, the victim’s exchange accounts were drained in a series of withdrawals across two major platforms.
From the Kraken account, attackers withdrew:
1,554 ETH (worth roughly $3.3 million at the time)
10.5 BTC
From the Coinbase account, they withdrew:
34.1 cbBTC (Coinbase‑wrapped Bitcoin on Ethereum)
Together the stolen assets totaled approximately $6.7 million. Investigators tracking the transactions identified the receiving wallets and linked the withdrawals to a coordinated theft event.
Public reporting describes the attack as a suspected physical coercion incident, meaning the victim may have been forced to unlock or authorize their accounts. However, the exact method of coercion has not been independently confirmed by law enforcement as of the latest reports.
Studio Global AI
Continue your research
This page includes a source-backed answer you can continue inside Studio Global.
What is the short answer to "The $6.7M Crypto Wrench Attack: What Happened and Why Physical Crypto Crime Is Rising"?
A crypto holder reportedly lost about $6.7 million after attackers drained funds from their Kraken and Coinbase accounts—1,554 ETH, 10.5 BTC, and 34.1 cbBTC—with roughly $5.3 million later laundered through Tornado Ca...
What are the key points to validate first?
A crypto holder reportedly lost about $6.7 million after attackers drained funds from their Kraken and Coinbase accounts—1,554 ETH, 10.5 BTC, and 34.1 cbBTC—with roughly $5.3 million later laundered through Tornado Ca... On‑chain observers tracked the withdrawals from both exchanges before the stolen assets were quickly moved and partially mixed through Tornado Cash to obscure the trail.
What should I do next in practice?
Security researchers say incidents like this are part of a broader shift from technical exploits toward physical coercion and social engineering targeting the human side of crypto security.
The $6.7M Crypto Wrench Attack: What Happened and Why Physical Crypto Crime Is Rising
A crypto holder reportedly lost about $6.7 million after attackers drained funds from their Kraken and Coinbase accounts—1,554 ETH, 10.5 BTC, and 34.1 cbBTC—with roughly $5.3 million later laundered through Tornado Ca... On‑chain observers tracked the withdrawals from both exchanges before the stolen assets were qui...
A crypto holder reportedly lost about $6.7 million after attackers drained funds from their Kraken and Coinbase accounts—1,554 ETH, 10.5 BTC, and 34.1 cbBTC—with roughly $5.3 million later laundered through Tornado Ca...
On‑chain observers tracked the withdrawals from both exchanges before the stolen assets were quickly moved and partially mixed through Tornado Cash to obscure the trail.
Security researchers say incidents like this are part of a broader shift from technical exploits toward physical coercion and social engineering targeting the human side of crypto security.
What happened in the recent suspected physical “wrench attack” on a crypto user who lost about $6.7 million, including how attackers drainedPhysical coercion attacks targeting crypto holders are rising as criminals bypass technical security and target individuals directly.
AI Prompt
Create a landscape editorial hero image for this Studio Global article: What happened in the recent suspected physical “wrench attack” on a crypto user who lost about $6.7 million, including how attackers drained. Article summary: A crypto user reportedly lost about $6.7 million after a suspected physical “wrench attack,” meaning attackers appear to have coerced access to the victim’s exchange accounts rather than exploiting a smart contract or ex. Topic tags: general, general web. Reference image context from search candidates: Reference image 1: visual subject "New York police officers arrest John Woeltz, Friday, May 23, 2025, in New York, who was charged with kidnapping, assaulting and holding a man against his will for several weeks in" source context "Why 'wrench attacks' on wealthy crypto holders are on the rise" Reference image 2: visual subject "William Duplessie is escorted out
openai.com
A cryptocurrency holder reportedly lost about $6.7 million in a suspected physical “wrench attack,” a type of crime where attackers coerce victims into giving up access to their crypto accounts rather than exploiting software vulnerabilities. The incident involved coordinated withdrawals from both Kraken and Coinbase accounts, followed by rapid laundering of the stolen assets through crypto‑mixing services.
The case illustrates a growing trend in 2026: attackers increasingly target people instead of code, combining intimidation, social engineering, and on‑chain laundering techniques to bypass technical defenses.
How the $6.7 Million Theft Happened
According to on‑chain monitoring reports, the victim’s exchange accounts were drained in a series of withdrawals across two major platforms.
From the Kraken account, attackers withdrew:
1,554 ETH (worth roughly $3.3 million at the time)
10.5 BTC
From the Coinbase account, they withdrew:
34.1 cbBTC (Coinbase‑wrapped Bitcoin on Ethereum)
Together the stolen assets totaled approximately $6.7 million. Investigators tracking the transactions identified the receiving wallets and linked the withdrawals to a coordinated theft event.
Public reporting describes the attack as a suspected physical coercion incident, meaning the victim may have been forced to unlock or authorize their accounts. However, the exact method of coercion has not been independently confirmed by law enforcement as of the latest reports.
Studio Global AI
Continue your research
This page includes a source-backed answer you can continue inside Studio Global.
What is the short answer to "The $6.7M Crypto Wrench Attack: What Happened and Why Physical Crypto Crime Is Rising"?
A crypto holder reportedly lost about $6.7 million after attackers drained funds from their Kraken and Coinbase accounts—1,554 ETH, 10.5 BTC, and 34.1 cbBTC—with roughly $5.3 million later laundered through Tornado Ca...
What are the key points to validate first?
A crypto holder reportedly lost about $6.7 million after attackers drained funds from their Kraken and Coinbase accounts—1,554 ETH, 10.5 BTC, and 34.1 cbBTC—with roughly $5.3 million later laundered through Tornado Ca... On‑chain observers tracked the withdrawals from both exchanges before the stolen assets were quickly moved and partially mixed through Tornado Cash to obscure the trail.
What should I do next in practice?
Security researchers say incidents like this are part of a broader shift from technical exploits toward physical coercion and social engineering targeting the human side of crypto security.
After the assets were withdrawn, the attackers rapidly moved the funds across wallets. A large portion of the proceeds—about $5.3 million—was reportedly routed through Tornado Cash, a cryptocurrency mixer designed to break the traceable link between sending and receiving addresses.
Mixers like Tornado Cash work by pooling many users’ deposits and redistributing them to new addresses, making it significantly harder for investigators to trace stolen funds on public blockchains.
While blockchain analysis tools can often reconstruct parts of the transaction flow, mixing services remain one of the most common methods used to obscure the origin of illicit crypto transfers.
What a “Wrench Attack” Means
The term “wrench attack” comes from a long‑standing security joke: instead of hacking encryption, criminals simply threaten someone with a wrench until they reveal their password or private keys.
In the crypto world, this usually involves:
Home invasions or kidnappings
Threats or physical intimidation
Forcing victims to unlock phones or hardware wallets
Coercing victims to authorize transfers from exchanges or wallets
Unlike smart‑contract exploits, these attacks bypass cryptography entirely by targeting the human operator.
The Global Rise of Physical Crypto Attacks
Security researchers say incidents like this are becoming more common.
A report by blockchain security firm CertiK recorded 34 verified physical crypto attacks worldwide between January and April 2026, a 41% increase compared with the same period in 2025.
Those attacks caused an estimated $101 million in losses in just four months, nearly double the $52.2 million lost during all of 2025.
Geographically, the incidents are highly concentrated:
Europe accounted for about 82% of cases in early 2026.
France has been repeatedly cited as a hotspot for crypto‑targeted robberies.
Researchers warn the real number of attacks may be significantly higher because many victims never report incidents publicly.
Similar Cases in the United States
The pattern is not limited to Europe. Authorities in the United States have also uncovered violent robberies targeting crypto holders.
In one federal case, suspects posing as delivery drivers allegedly forced entry into homes and compelled victims at gunpoint to access their cryptocurrency accounts. Prosecutors say the group stole around $6.5 million from one victim during the robbery spree.
These crimes often rely on information gathered from social media, leaked databases, or public records that reveal a person’s crypto wealth or home address.
Pressure on Exchanges and the Human Security Gap
The incident also highlights the growing role of human‑layer vulnerabilities in crypto security.
Even when exchange infrastructure itself is secure, attackers may still succeed by targeting users or support channels. For example, Kraken disclosed in 2026 that criminals attempted to extort the company after gaining limited access to customer data through compromised support staff accounts—though the exchange said no customer funds were at risk.
Separately, other reported incidents have involved social‑engineering attacks on crypto users, including a case where a Kraken user reportedly lost about $18.2 million after attackers manipulated access credentials and moved funds across chains.
Together, these events highlight a shift in the threat model: the weakest point is often the person, not the protocol.
The Bigger Lesson for Crypto Security
The $6.7 million theft underscores how crypto crime is evolving. Rather than focusing only on smart‑contract bugs or exchange hacks, attackers increasingly combine:
real‑world intimidation
social engineering
leaked personal data
rapid on‑chain laundering tools
For cryptocurrency holders, that means operational security—privacy, account separation, and physical safety—has become just as important as strong passwords or hardware wallets.
As digital assets grow in value and visibility, the risks are no longer confined to cyberspace. In a growing number of cases, the attack vector is simply the person holding the keys.
cointelegraph.comCrypto Wrench Attacks in Europe Spike as Losses Reach ...
After the assets were withdrawn, the attackers rapidly moved the funds across wallets. A large portion of the proceeds—about $5.3 million—was reportedly routed through Tornado Cash, a cryptocurrency mixer designed to break the traceable link between sending and receiving addresses.
Mixers like Tornado Cash work by pooling many users’ deposits and redistributing them to new addresses, making it significantly harder for investigators to trace stolen funds on public blockchains.
While blockchain analysis tools can often reconstruct parts of the transaction flow, mixing services remain one of the most common methods used to obscure the origin of illicit crypto transfers.
What a “Wrench Attack” Means
The term “wrench attack” comes from a long‑standing security joke: instead of hacking encryption, criminals simply threaten someone with a wrench until they reveal their password or private keys.
In the crypto world, this usually involves:
Home invasions or kidnappings
Threats or physical intimidation
Forcing victims to unlock phones or hardware wallets
Coercing victims to authorize transfers from exchanges or wallets
Unlike smart‑contract exploits, these attacks bypass cryptography entirely by targeting the human operator.
The Global Rise of Physical Crypto Attacks
Security researchers say incidents like this are becoming more common.
A report by blockchain security firm CertiK recorded 34 verified physical crypto attacks worldwide between January and April 2026, a 41% increase compared with the same period in 2025.
Those attacks caused an estimated $101 million in losses in just four months, nearly double the $52.2 million lost during all of 2025.
Geographically, the incidents are highly concentrated:
Europe accounted for about 82% of cases in early 2026.
France has been repeatedly cited as a hotspot for crypto‑targeted robberies.
Researchers warn the real number of attacks may be significantly higher because many victims never report incidents publicly.
Similar Cases in the United States
The pattern is not limited to Europe. Authorities in the United States have also uncovered violent robberies targeting crypto holders.
In one federal case, suspects posing as delivery drivers allegedly forced entry into homes and compelled victims at gunpoint to access their cryptocurrency accounts. Prosecutors say the group stole around $6.5 million from one victim during the robbery spree.
These crimes often rely on information gathered from social media, leaked databases, or public records that reveal a person’s crypto wealth or home address.
Pressure on Exchanges and the Human Security Gap
The incident also highlights the growing role of human‑layer vulnerabilities in crypto security.
Even when exchange infrastructure itself is secure, attackers may still succeed by targeting users or support channels. For example, Kraken disclosed in 2026 that criminals attempted to extort the company after gaining limited access to customer data through compromised support staff accounts—though the exchange said no customer funds were at risk.
Separately, other reported incidents have involved social‑engineering attacks on crypto users, including a case where a Kraken user reportedly lost about $18.2 million after attackers manipulated access credentials and moved funds across chains.
Together, these events highlight a shift in the threat model: the weakest point is often the person, not the protocol.
The Bigger Lesson for Crypto Security
The $6.7 million theft underscores how crypto crime is evolving. Rather than focusing only on smart‑contract bugs or exchange hacks, attackers increasingly combine:
real‑world intimidation
social engineering
leaked personal data
rapid on‑chain laundering tools
For cryptocurrency holders, that means operational security—privacy, account separation, and physical safety—has become just as important as strong passwords or hardware wallets.
As digital assets grow in value and visibility, the risks are no longer confined to cyberspace. In a growing number of cases, the attack vector is simply the person holding the keys.
cointelegraph.comCrypto Wrench Attacks in Europe Spike as Losses Reach ...
