Blockchain security firm CertiK has released a sobering projection: 2026 is on track to close with approximately 130 physical crypto wrench attacks and hundreds of millions in losses, based on the trajectory established in the first four months of the year. Between January and April 2026, CertiK verified 34 incidents — a 41% increase over the same period in 2025 — with estimated losses reaching roughly $101 million across ransom payments, frozen funds, and failed extortion demands. The monthly breakdown reveals a pattern that reflects both criminal momentum and law enforcement response: January recorded 13 incidents, February dipped to 5 following large-scale European police operations in late January, March rebounded sharply to 10, and April logged 5. The February dip followed by a March surge illustrates how temporary disruption from enforcement operations has not meaningfully slowed the broader trend — criminals are adapting and returning to activity faster than sustained deterrence can take hold.

The geographic concentration of the attacks is striking. Europe accounted for 28 of the 34 verified incidents in the first four months of 2026, up sharply from approximately 39.5% of the 2025 total. France alone logged 24 cases in just four months, already exceeding the 20 cases recorded throughout the entirety of last year. French Interior Ministry officials confirmed 41 physically linked incidents since January — approximately one every 2.5 days. By contrast, all other regions declined significantly, with North America falling from 9 to 3 incidents and Asia from 25 to 2 over the same comparison period. CertiK attributes France's disproportionate surge to the concentration of major crypto industry companies in the country, data breaches that have exposed sensitive financial information, and a culture of public wealth disclosure that makes crypto holders more identifiable targets than in jurisdictions with stronger financial privacy norms.