On December 1, in Val‑d’Oise, France, the father of a Dubai‑based crypto entrepreneur was abducted on the street—another case cataloged in Jameson Lopp’s directory of more than 225 verified physical attacks on digital asset holders.
Lopp, chief security officer at Bitcoin wallet Casa, has tracked these incidents for six years, and his database shows a sharp rise: reported physical attacks jumped 169% in 2025 alone.
The threat itself isn’t unique to crypto. Gold brokers, luxury goods resellers, and cash couriers have long faced violence. What’s new is that digital assets—intangible by nature—are now being targeted in real-world confrontations.
This shift has sparked a new arms race in wallet design. “Panic wallets” now feature duress triggers that can instantly wipe balances, deploy decoy accounts, or silently alert authorities via subtle biometric gestures.
The concept is clever—until someone shows up with a wrench. As Lopp told Cointelegraph, “Ultimately, use of duress wallets relies upon speculation about the attacker, and you can’t possibly know their motivations and knowledge.”
The patterns in Lopp’s data suggest that these “wrench attacks” correlate with market activity. They spike during bull markets and periods of heavy over-the-counter (OTC) trading, when large sums move off exchanges. While the US accounts for the highest number of cases, the per-capita risk is greater in places like the United Arab Emirates and Iceland.
About a quarter of physical attacks on crypto holders are home invasions, often aided by leaked Know Your Customer (KYC) data—or, as Lopp wryly puts it, “Kill Your Customer”—and public-records doxing. Another 23% involve kidnappings. Roughly two-thirds of these attacks succeed, though around 60% of known perpetrators are eventually caught.
The trend roughly mirrors Bitcoin’s price chart. Each retail mania draws fresh money—and fresh targets—into public view, with criminals chasing returns just like any other investor.
Testing the panic gesture
Digital self-defense is evolving, but largely without proof of effectiveness. “There’s not much we can definitively say about duress wallets or triggers because we have so little data,” Lopp explains.
He cites one victim who tried a decoy wallet but failed to convince their assailant, and another who complied immediately yet was still tortured for hours because the thief assumed hidden reserves existed.
The builders fighting back
Matthew Jones, co-founder of Haven, learned this the hard way. During a 25 BTC trade in Amsterdam, his counterpart fled in a waiting van. Though his photos helped Europol trace the gang across Europe, none were ever caught.
Jones turned the ordeal into a product: a biometric, multi-party custody system designed around “continuous authentication without identity exposure.”
Haven’s biometric wallet locks transfers behind a live facial scan stored only on the user’s device. Large transactions—over $1,000—require real-time approval from a secondary verifier, such as a spouse or partner. Changing that contact triggers a 24-hour wait, rendering on-the-spot coercion almost useless. Jones explains, “It’s about having the cash in your wallet stolen, rather than your bank accounts emptied. You decide your risk tolerance and the amount you’re willing to expose.”
The custody dilemma
As physical coercion rises and privacy rules—like the OECD’s Crypto-Asset Reporting Framework—tighten, even veteran Bitcoiners are reevaluating self-custody. Some are now turning to custodianship to avoid personal risk.
Lopp calls this outcome catastrophic. “If enough people decide that Bitcoin self-custody is too dangerous, we’ll see massive centralization and systemic risk. It’s a battle I’ve been fighting for a decade.”
The paradox at the heart of crypto security in 2025 is clear: every safeguard—from stricter KYC databases to off-chain biometrics—narrows anonymity while expanding the attack surface.
What actually works
Despite all the innovation, the simplest protection remains discretion. Lopp advises, “The most effective way for a Bitcoiner to reduce wrench attack risk is difficult: don’t talk about Bitcoin, at least not under your real name or with your face visible.”
As hardware wallets add panic modes and regulators demand more transparency, the most scalable defense may be cultural rather than technical. Most wrench attacks succeed not because wallets can be hacked, but because victims can be found.
