How Physical Attacks Drive Crypto Investors Away from Self-Custody

The Bitcoin industry was built on a principle: “not your keys, not your coins.” This mantra empowered individual investors to take complete control of their digital assets through self-custody solutions like hardware wallets and private key management. However, a disturbing trend is forcing even the most ardent crypto advocates to reconsider this fundamental tenet.

The rise of so-called “wrench attacks”—physical violence aimed at stealing cryptocurrency—is driving investors away from self-custody toward centralized custodians and paper Bitcoin products like spot ETFs.

What Are Wrench Attacks?

The term “wrench attack” originated from a webcomic depicting someone being threatened with a wrench to reveal their passwords. These attacks involve physical coercion, kidnapping, or violence to pressure victims to transfer their funds on-chain or reveal private keys.

Unlike traditional cybercrime, wrench attacks exploit the most vulnerable element in any security system: the human.

Wrench attacks are nothing new. Jameson Lopp, a Bitcoin advocate and chief technology officer of Bitcoin Self-Custody Service Casa, published a GitHub repository logging hundreds of such incidents since 2014 — and those were only the ones reported in the news. However, the frequency and sophistication of these attacks have escalated dramatically as cryptocurrency adoption has accelerated and mainstream awareness of crypto wealth has grown.

The Escalating Threat Landscape

In the last two to three years, as crypto adoption has sped up and become more mainstream than ever, attacks have grown more public and sophisticated. Recent high-profile cases have sent shockwaves through the crypto community, fundamentally altering how investors perceive the risks of self-custody.

In January 2025, the founder of crypto wallet Ledger and his wife, David and Amandine Balland, were kidnapped, taken to separate locations and held at ransom. This attack on one of the most prominent figures in crypto security hardware demonstrated that even industry leaders are vulnerable to physical threats.

The situation worsened when the daughter of an exchange founder barely fought off attackers who attempted to kidnap her in a van on the streets of Paris. The brazen nature of this attempted broad-daylight kidnapping highlighted how emboldened attackers have become. The incident was so concerning that it led French Interior Minister Bruno Retailleau to meet with cryptocurrency professionals to discuss the issue.

These attacks represent a fundamental shift in how criminals target crypto wealth. Rather than attempting complex technical hacks, criminals are increasingly turning to the most direct method: physical coercion of individuals who hold their own keys.

The Custody Industry Response

As concern over these attacks grows, crypto custodians are noticing an uptick in interest in their services. The shift is particularly pronounced among high-net-worth individuals who previously championed self-custody as the ultimate expression of financial sovereignty.

Emma Shi, over-the-counter and institutional sales director of HashKey, which offers custody and exchange services, told Cointelegraph: “We’re absolutely seeing rising retail anxiety translate into meaningful inflows. Wealthier retail investors are increasingly approaching regulated custodians after high-profile cases like the recent Manhattan kidnapping, where physical coercion was used to access private keys.”

The demographic shift is telling. Shi said HashKey’s custody business has noted increased interest in storage from “family offices, crypto-native high-net-worth individuals and even those with nest eggs that are large enough to be vulnerable to theft.” These are precisely the investors who previously would have been most committed to self-custody principles.

The Single Point of Failure Problem

The core issue driving investors away from self-custody lies in what security experts call a “single point of failure.” Cold wallets have long been lauded by crypto advocates as a way to give investors full control over their assets and to keep them maximally secure offline. However, this single key also provides a “single point of failure,” per Wade Wang, CEO of multiparty computation (MPC) crypto custody service Safeheron.

This creates a paradox: the very feature that makes self-custody appealing—complete individual control—also makes it vulnerable to physical attacks. Wade Wang explains that there is a “flight to security” among crypto investors, where holders “are actively seeking innovative solutions that eliminate that single point of failure to significantly raise the bar for attacking.”

The problem mirrors challenges faced throughout financial history. Crypto self-custody, while boasting a new technology, runs into the same problem as treasure hoarders throughout history — they were vulnerable to physical attacks and theft until they could share that risk with a stronger and securer institution like a bank. Robbing a bank is a lot harder than robbing a person.

The Economics of Attack Deterrence

Sophisticated investors are now thinking about security in terms of attack economics. Wang said that investors wish to “return to the fundamental principle: making the cost for an attacker rise exponentially.

For example, when it costs $3 million to steal $10 million, the incentive for attack is lost.”

Centralized custody services achieve this by creating multiple layers of protection. Third-party custody can achieve this and mitigate the problem of wrench attacks, adding time-locks and layers of approval and shifting the target from an individual to the custodian’s employees. Rather than targeting a single individual with a hardware wallet, attackers would need to compromise multiple employees at a professional custody service, dramatically increasing the complexity and risk of the operation.

The Rise of Paper Bitcoin Products

The security concerns driving investors to custodial services are also fueling demand for paper Bitcoin products like spot ETFs. These products offer exposure to Bitcoin’s price movements without requiring investors to hold actual cryptocurrency or manage private keys. For investors concerned about physical security, Bitcoin ETFs represent the ultimate solution—they can gain Bitcoin exposure while their assets remain safely within the traditional financial system’s institutional custody framework.

Bitcoin spot ETFs, approved by the SEC in 2024, have seen massive inflows partly because they eliminate the self-custody dilemma entirely. Investors can hold Bitcoin through their traditional brokerage accounts, protected by the same institutional-grade security that safeguards their stock holdings.

The custodial arrangements for these ETFs involve major financial institutions with sophisticated physical and digital security protocols that individual investors could never replicate.

This trend represents a significant philosophical shift in the crypto space. Many early Bitcoin adopters viewed self-custody as essential to cryptocurrency’s value proposition. However, the practical reality of physical security threats is forcing a reevaluation of these principles.

Limitations and Trade-offs

However, custody solutions aren’t perfect. “But it is not an optimal solution,” per Wang. Trust is still put in a single, centralized institution and, as exemplified by the recent wallet breaches at Coinbase and Bybit, even major regulated crypto businesses are vulnerable to employee misconduct and phishing.

In MPC systems, control doesn’t belong to any one person, and transferring funds requires complex consensus protocols from multiple parties. This creates a hybrid approach that maintains some aspects of decentralization while eliminating the single point of failure that makes individuals vulnerable to wrench attacks.

Changing Public Perception

The shift toward custodial solutions may actually help reduce the overall risk of crypto-related violence. Shi said, “The perception of risk matters, too. Attackers often assume holders store funds themselves, so public awareness that more crypto is held in custodial solutions may deter opportunistic assaults.”

As more crypto wealth moves to institutional custody and paper products, the assumption that individual crypto investors are walking targets may begin to fade, potentially reducing the frequency of opportunistic attacks.

Regulatory Drivers and Market Maturation

The trend toward institutional custody is being accelerated by regulatory developments. This regulatory shift has been good for the custody industry as well, as it “legitimizes professional custody for everyday investors and is leading to more offerings from not only crypto-native firms but traditional banks as well,” said Shi.

Better regulatory frameworks with more jurisdictions “proactively setting robust regulations” will “inevitably lead to more severe law enforcement actions, which will significantly increase the cost of such attacks and fundamentally curb such behaviors.”

Trade One Risk For Another

The rise of wrench attacks are a sobering reality for the crypto industry’s idealistic vision of individual financial sovereignty and showcases the reality on the ground.

As the industry develops more sophisticated custody solutions—from institutional services to distributed MPC systems—investors may eventually find ways to maintain control over their assets without compromising their physical security.

For now, the message is clear:

When a $5 wrench can compromise millions or even Billions Bitcoin, the luxury of pure self-custody may be reserved for those willing and able to deploy funds in their own physical security or master operational security from day one.

For everyone else, they will have to make a choice, of some combination of self custody and custodial ownership as a model of Bitcoin exposure.