Violent Crypto Attacks Have Stolen $30 Million in 2026, With France a Major Hotspot
Summary
Chainalysis estimates violent crypto attacks stole more than $30 million through mid-2026. France recorded a sharp rise in incidents, which the report links potentially to exposed personal data; on-chain flows show varying levels of attacker sophistication.
Key points
- Successful violent crypto attacks stole an estimated $30 million through mid-2026, compared with a record $58 million in 2025.
- Through late June, only 12 of 46 documented attempts resulted in payment, a 26% success rate.
- France recorded 30 publicly known incidents through mid-2026; authorities said they had documented more than 70 crypto-related violent incidents.
- The report identifies a 2024 theft and sale of French tax dossiers, and a separate breach affecting about 50,000 Waltio users, as possible sources of information used to target victims.
- Family members or acquaintances were targeted in about 25–30% of incidents by early 2026; the share exceeded 40% in France.
- On-chain fund flows ranged from direct transfers to exchanges to use of DeFi tools and apparent connections to broader criminal networks.
Article Details
- Publisher
- Chainalysis
- Report Period
- 2026 through mid-year; comparisons include 2024–2025 and earlier years
- Scope
- Violent physical attacks targeting cryptocurrency holders, reported incidents, stolen funds, and on-chain movement of proceeds
- Sample Size
- 46 documented global incidents through late June 2026
- Key Statistics
- More than $30 million was estimated stolen in successful violent crypto attacks through mid-2026; $58 million was stolen in 2025, the highest annual total on record.
- Including attempted extractions, coerced transfers later frozen or recovered, and ransoms demanded, estimated totals were approximately $316 million in 2024, $180 million in 2025, and $107 million through mid-2026; the report says these are likely undercounts.
- Through late June 2026, 12 of 46 theft attempts (26%) resulted in payment, compared with 47 of 95 (49%) in 2025 and 32 of 48 (67%) in 2024.
- France had 30 publicly known incidents through mid-2026; Interior Minister Laurent Nuñez said authorities had documented over 70 crypto-related violent incidents.
- Family members or acquaintances were targeted in approximately 25–30% of cases by early 2026; in France, over 40% of incidents targeted a relation rather than the crypto holder.
- Recommendations
- Avoid publicly disclosing cryptocurrency holdings, including through social media and conference appearances.
- Use secure custody arrangements and avoid linking on-chain activity to a known real-world identity.
- Protect sensitive personal and financial data collected under regulatory frameworks.
- Coordinate physical-crime investigators with blockchain analysts to trace proceeds and identify laundering patterns.
- Expand blockchain literacy beyond specialized units; the report names Chainalysis Wallet Scan and Rapid as tools that can help frontline officers assess crypto relevance.
People
Laurent NuñezInterior Minister who said authorities had documented over 70 crypto-related violent incidents and announced planned protections for people in the crypto sector.Ryan WeddingDescribed in the report as an Olympic snowboarder-turned-alleged-cocaine trafficker; wallets associated with him were cited in an on-chain laundering case.
Vendors
Products
Chainalysis ReactorIn the Chainalysis Reactor graph below, we see that funds reported as stolen (in Bitcoin) moved through a series of intermediary wallets, THORChain Bridge, a decentralized exchange, and more — all in an attempt toChainalysis Wallet Scancrypto. This means blockchain literacy should not be limited to specialized units. Tools like Chainalysis Wallet Scan and Rapid can help frontline officers quickly assess whether cryptocurrency is relevant to a caseRapidMinister Nuñez announced plans to strengthen protections for people in the crypto sector, including a rapid identification and alert system for at-risk figures.
Countries
BrazilFrance, the United States, Brazil, and Thailand have recorded the highest cumulative incident counts since 2023, but France now sits in a class of its own. Prior to 2025, France had recorded only a handful of knownFranceon-chain patterns reveal about the threat actors involved. We also explore how a single data breach in France may have fueled a dramatic spike in attacks against crypto holders.NetherlandsThe Netherlands is an exception, where 67% of victims were non-residents. However, with only three documented incidents, this figure should be interpreted cautiously. Violent crypto attacks remain rare events inSwedenIn Sweden, 100% of victims with known residency status were locals.ThailandFrance, the United States, Brazil, and Thailand have recorded the highest cumulative incident counts since 2023, but France now sits in a class of its own. Prior to 2025, France had recorded only a handful of knownUnited StatesThe two attack types vary by region. The United States has been an outlier for home invasions for nearly two years, challenged only recently by France. Meanwhile, France sees kidnapping attempts at a much higher rate