On July 22, 2026, CertiK, the largest Web3 security services provider, released its Intel3D: H1 2026 Wrench Attacks Report, documenting 52 verified physical coercion incidents globally in the first half of 2026, a 33.3% increase from 39 in H1 2025. Recorded financial exposure reached $124.1 million, up from $10.5 million a year earlier.
The report finds that home invasion has overtaken all other tactics, rising from a single incident in H1 2025 to 20 in H1 2026, now accounting for roughly 41% of all cases. Europe recorded 39 of the 52 global incidents, with France alone responsible for 33, or 63.5% of the worldwide total. Notable cases include a €900,000 forced bitcoin transfer during a home invasion near Paris and a $24 million coerced transfer in the UK's Sillytuna case, both illustrating how physical coercion now bypasses on-chain security controls entirely.
CertiK is pairing these findings with concrete tools for the industry. Its OpSec Service helps high-risk executives and institutions identify exactly what personal and organizational data could be assembled into a targeting profile, covering identity, family, residence, and movement patterns, and provides remediation steps to close those gaps.
CertiK is also deepening its role in cross-industry coordination. In 2026, the company pledged expanded cooperation with global law enforcement, including INTERPOL and Europol, to combat crypto-enabled crime.
The full CertiK Intel3D: H1 2026 Wrench Attacks Report is available for download, including regional breakdowns, attacker profiles, and a full set of custody and institutional recommendations.
