Wrench Attack

A wrench attack is a physical assault or credible threat of violence against a crypto holder to force them to hand over their private keys, seed phrase, or wallet access. The name comes from a security meme: no amount of encryption protects your keys if someone is holding a wrench to your head. It is also called the five-dollar wrench attack, a reference to the low cost of the tool compared to the value of the target's holdings.

Why Crypto Holders Are Targeted

Crypto wealth is self-sovereign. There is no bank to call and no fraud team to reverse a transaction. Once an attacker forces you to sign or transfer, the funds are gone. This makes crypto holders uniquely attractive targets for physical coercion.

Public on-chain data makes profiling easier than people realize. If your wallet address is connected to your real identity, anyone can check your balance at any time. Sharing portfolio screenshots on social media, posting gains publicly, or using the same username across crypto forums and real-world profiles gives attackers the information they need to identify and locate you.

High-profile cases have increased globally. In 2023 and 2024, kidnapping and home invasion incidents targeting known crypto holders were reported in France, the United Kingdom, the United States, and Southeast Asia. Several involved victims whose wealth was identified entirely through on-chain data and social media.

How to Reduce Your Physical Risk

Security in crypto is not only a software problem. Physical security practices matter equally once you hold meaningful value.

• Use a decoy wallet. Keep a secondary wallet with a small balance that you can hand over under duress. Your main holdings stay protected in a different wallet or hardware device not present during the confrontation.
• Implement multi-signature setups. Structure your holdings so that no single device or action can move large amounts. A 2-of-3 multisig setup requires cooperation between multiple devices or people, making a single forced transfer impossible.
• Use time-locked transactions. Some wallets and protocols support time locks that delay outgoing transactions by hours or days. This creates a window for you to cancel or alert others after a coerced signing event.
• Do not disclose holdings publicly. Avoid sharing specific wallet balances, transaction histories, or hardware wallet ownership on social media or in public forums.
• Separate your identity from your addresses. Use privacy tools like coinjoin, avoid reusing addresses, and never link your real name directly to a high-value wallet.

The Limits of Cryptographic Security

Cryptography protects against remote attackers and digital threats. It does nothing to protect you when someone is physically present and threatening you. Your seed phrase is memorized or written down somewhere. Under enough pressure, most people will share it.

This is why the crypto security community emphasizes operational security (OPSEC) as part of any serious self-custody strategy. The goal is not to make it impossible to take your keys. It is to make the attacker uncertain whether taking your keys will actually yield anything valuable.

Sources

https://github.com/jlopp/physical-bitcoin-attacks
https://www.coindesk.com/tech/2021/10/01/the-5-wrench-attack-and-other-physical-threats-to-your-bitcoin
https://www.ledger.com/academy/physical-crypto-security