Bitcoin News Today: Leaked Data and Rising Crypto Values Drive 52 Wrench Attacks in 2025

A Tel Aviv-based individual has been indicted for orchestrating a $600,000 "wrench attack" on a Herzliya crypto trader, marking the 52nd such incident globally in 2025. Prosecutors revealed that Murad Mahajna, a repeat offender with 10 prior convictions, led a trio of assailants in a September 7 home invasion. The attackers bound the victim with cables, beat him, and threatened his family before stabbing him in the legs to compel access to his crypto holdings. Over the course of an hour, thieves transferred $547,260 in Bitcoin and $42,248 in USDT to their wallets, while also seizing a $50,000 Rolex, a Trezor hardware wallet, and cash. Mahajna was arrested on September 10 using recorded calls, voice analysis, and surveillance footage .

The Herzliya case underscores a troubling global surge in wrench attacks, defined as physical assaults targeting cryptocurrency holders to extract private keys or digital assets. Security researcher Jameson Lopp, who tracks these incidents, noted that 2025 has already surpassed the previous record for such attacks, with an average of one incident per week. September alone saw four wrench attacks, including the Herzliya case and a high-profile incident in France where a 20-year-old Swiss man was rescued after being tied up near a high-speed train station . Alena Vranova, founder of hardware wallet firm SatoshiLabs, warned at the Baltic Honeybadger 2025 conference that at least one Bitcoiner is victimized weekly through kidnapping, torture, or extortion, with cases involving as little as $6,000 in crypto .

Industry experts attribute the rise in wrench attacks to the combination of high on-chain values and data breaches from centralized services. Over 80 million crypto user identities are currently exposed online, with 2.2 million including home addresses, according to Vranova. These leaks, often from KYC-compliant exchanges, enable criminals to identify targets for physical coercion. The recent Coinbase data breach, which exposed customer addresses, and a Cybernews report on 16 billion stolen credentials from tech firms like Apple and Google, highlight the vulnerability of crypto holders to targeted attacks . Blockchain analysis tools further exacerbate the risk by linking stolen data to large crypto holdings, facilitating phishing, SIM-swapping, or violent coercion .

The Herzliya attack exemplifies the escalating brutality of these crimes. Prosecutors stated that Mahajna initially demanded 500 BTC ($61 million) but settled for the victim's wallet access after refusing to comply. The attackers cleaned the crime scene with disinfectant and fled, leaving the victim to seek police assistance days later out of fear for his family's safety. Similar incidents in France and the U.S. have involved mutilation and prolonged captivity, with victims reporting ransom demands tied to their crypto assets. In January 2025, Ledger co-founder David Balland survived a 48-hour ordeal where attackers severed his finger to pressure him for wallet access .

Security experts emphasize the need for proactive measures to mitigate wrench attack risks. Mehow Pospieszalski of AmericanFortress advised obscuring physical evidence of crypto holdings and adopting multi-signature wallets, though he noted limited practicality in many regions. Vranova recommended reducing public crypto profiles, using non-custodial wallets, and splitting holdings across secure locations. Law enforcement cooperation remains a challenge, with Pospieszalski citing a "vibe of mistrust" between crypto communities and authorities. In France, the 10th wrench attack of 2025 occurred in Maisons-Alfort, where a 23-year-old was coerced into handing over a Ledger hardware wallet and €5,000 in cash .

As Bitcoin's price reaches record highs and institutional adoption grows, the crypto industry faces a critical juncture in balancing financial sovereignty with security. The Herzliya case and global trends underscore the urgent need for enhanced operational security, data privacy, and cross-sector collaboration to combat an escalating threat. With wrench attacks projected to double the previous annual record, investors must prioritize layered custody solutions and discreet asset management to protect both digital and physical safety .

Source: [1] Decrypt (https://decrypt.co/343566/two-indicted-in-tel-aviv-over-600000-wrench-attack-on-bitcoin-trader)

Source: [2] COINOTAG (https://en.coinotag.com/alleged-bitcoin-targeted-home-invasion-in-israel-may-reflect-surge-to-52-global-wrench-attacks-in-2025/)

Source: [3] Cryptopolitan (https://www.cryptopolitan.com/wrench-attacks-on-bitcoin-holders-may-double/)

Source: [4] Cointelegraph (https://cointelegraph.com/news/1-bitcoiner-kidnapped-every-week-cyrpto-exec)

Source: [5] Forbes (https://www.forbes.com/sites/boazsobrado/2025/01/25/the-100m-wrench-attack-how-crypto-millionaires-became-crime-targets/)

Source: [6] Coindoo (https://coindoo.com/france-records-10th-crypto-linked-kidnapping-in-2025-as-wrench-attacks-surge/)

Source: [7] The Block (https://www.theblock.co/post/359010/france-hit-by-10th-crypto-wrench-attack-of-2025-as-kidnappers-target-23-year-old-near-paris)

Source: [8] GlobalNews (https://globalnews.ca/news/11201140/crypto-wrench-attacks-kidnapping-assault-torture/)