Wrench attacks often carried out by ‘cannon fodder’ thugs recruited on social media: report

Even as crypto entrepreneurs boost their security, wrench attacks keep happening, particularly in France. But who’s behind the violent home invasions?

According to a new investigation by Franceinfo, a crime boss is usually pulling the strings — and often outside of the country where the crime takes place.

“The pattern of low-level executors and a remote mastermind giving orders by phone is one investigators have clearly identified for several years now,” a Wednesday deep dive into the criminal phenomenon read.

“These are pyramid-structured organizations with ties to drug trafficking that are being monitored.”

And those carrying out the dirty work are disposable young thugs recruited through social media.

Wrench attacks — when physical violence is used to steal someone’s crypto — have surged in recent years, with 2025 the worst year on record. Attacks have surged this year, with France the epicenter of the crimes.

‘Cannon fodder’ 

The new report from Franceinfo speaks to the victim of a wrench attack, who criminals targeted because they believed his son held large amounts of crypto.

According to the investigation, the criminals in the operation were aged 19 to 23, and wore identical outfits — including balaclavas.

They joked during the ordeal, Franceinfo reported, suggesting their relaxed attitude towards using violence.

The man giving instructions via a phone call appeared angrier, ordering them to cut off the victim’s finger.

According to the report, foot soldiers are typically paid a few thousand euros and are easily disposed of by crime bosses — with one source describing them as “cannon fodder.”

Police were immediately able to arrest the criminals after they released their hostage, Franceinfo reported.

Why France? 

France has been the epicenter of the attacks, with the report noting 20 attacks happening in the country since 2023.

But Bitcoin developer Jameson Lopp created a tool tracking the attacks which notes 19 attacks happening in France alone in 2026.

The European country has been a favorite for wrench attacks after databases containing crypto investors’ personal details — including home addresses — were leaked.

Criminals have since been able to use the data to target investors.

One high-profile case saw crooks kidnap David Balland, co-founder of crypto hardware wallet brand Ledger, and his wife in France.

Criminals held the pair for around 24 hours before they were rescued by the French authorities.

Mathew Di Salvo is a news correspondent with DL News. Got a tip? Email at mdisalvo@dlnews.com.