Crypto custodians are reporting increased interest in their services amid the rising frequency of so-called “$5 wrench attacks” on cryptocurrency traders, investors and project leaders.
In the last year, several high-profile wrench attacks — physical attempts to steal someone’s crypto — have targeted prominent investors and business executives in the blockchain industry.
The crypto mantra of “not your keys, not your coins” has lost its power among some investors who fear for their personal safety. Cold wallets may offer full control over digital assets, but they also present a single point of attack.
As crypto adoption grows, and wrench attacks persist with the proliferation of more high-value crypto investors, custodians are seeing a shift in preference from self-custody to institutional control.
Crypto wrench attacks drive security demand
Wrench attacks are nothing new. Jameson Lopp, a Bitcoin (BTC) advocate and chief technology officer of Bitcoin wallet Casa, published a GitHub repository logging hundreds of such incidents since 2014 — and those were only the ones reported in the news.
In the last two to three years, as crypto adoption has sped up and become more mainstream than ever, attacks have grown more public and sophisticated. In January 2025, the founder of crypto wallet Ledger and his wife, David and Amandine Balland, were kidnapped, taken to separate locations and held at ransom.
Related: Violent crypto robberies on the rise: Six attacks that targeted investors
Just months later, the daughter of an exchange founder barely fought off attackers who attempted to kidnap her in a van on the streets of Paris. Concern over the rise in attacks and their similar methods led French Interior Minister Bruno Retailleau to meet with cryptocurrency professionals to discuss the issue.
As concern over these attacks grows, crypto custodians are noticing an uptick in interest in their services.
Emma Shi, over-the-counter and institutional sales director of HashKey, which offers custody and exchange services, told Cointelegraph, “We’re absolutely seeing rising retail anxiety translate into meaningful inflows. Wealthier retail investors are increasingly approaching regulated custodians after high-profile cases like the recent Manhattan kidnapping, where physical coercion was used to access private keys.”
Shi said HashKey’s custody business has noted increased interest in storage from “family offices, crypto-native high-net-worth individuals and even those with nest eggs that are large enough to be vulnerable to theft.”
Cold wallets have long been lauded by crypto advocates as a way to give investors full control over their assets and to keep them maximally secure offline. However, this single key also provides a “single point of failure,” per Wade Wang, CEO of multiparty computation (MPC) crypto custody service Safeheron.
Wang said that there is a “flight to security” among crypto investors, where holders “are actively seeking innovative solutions that eliminate that single point of failure to significantly raise the bar for attacking.”
Already in 2023, a report from PricewaterhouseCoopers on the state of digital custody noted the challenge of cold wallets being prone to theft or loss. One solution posited in the report was MPC or multisignature wallet options.
Can custody services stop wrench attacks?
Crypto self-custody, while boasting a new technology, runs into the same problem as treasure hoarders throughout history — they were vulnerable to physical attacks and theft until they could share that risk with a stronger and securer institution like a bank. Robbing a bank is a lot harder than robbing a person.
In the same fashion, crypto investors are now seeking to “raise the cost” of the $5 wrench attack. Wang said that investors wish to “return to the fundamental principle: making the cost for an attacker rise exponentially. For example, when it costs $3 million to steal $10 million, the incentive for attack is lost.”
Third-party custody can achieve this and mitigate the problem of wrench attacks, adding time-locks and layers of approval and shifting the target from an individual to the custodian’s employees.
“But it is not an optimal solution,” per Wang. Trust is still put in a single, centralized institution and, as exemplified by the recent breaches at Coinbase and Bybit, even major regulated crypto businesses are vulnerable to employee misconduct and phishing.
Related: Lessons from Bybit hack: How to stay safe on crypto exchanges
Wang suggested that distributed custody, such as MPC, “is a superior solution because it fundamentally solves the problem. The core principle of MPC is to use technology to decentralize the single point of control and risk […] into a ‘multiparty’ structure.”
In such a system, control doesn’t belong to any one person, and transferring funds requires complex consensus protocols from multiple parties.
Decentralized solutions may better reflect the ethos of the blockchain industry, but “we cannot neglect the benefits of centralized custodians,” Wang said. “Reliable security measures bring better assurance of keeping clients’ assets safe, a familiar way of doing things for lots of new crypto players.”
Centralized or decentralized, crypto investors could still be at risk if the public image of crypto investors is that they are all walking around with cold wallets full of Bitcoin.
Shi said, “The perception of risk matters, too. Attackers often assume holders store funds themselves, so public awareness that more crypto is held in custodial solutions may deter opportunistic assaults.”
Wrench attacks a “temporary problem” solved by adoption
Public perception is indeed changing. Retail investors are increasingly making crypto part of their portfolio, according to a 2024 report from Ernst & Young. New regulations in large financial markets like the EU and the US are creating the frameworks necessary for institutional investors to get involved.
This regulatory shift has been good for the custody industry as well, as it “legitimizes professional custody for everyday investors and is leading to more offerings from not only crypto-native firms but traditional banks as well,” said Shi.
“We’re seeing crypto adoption accelerate in regions with regulatory clarity, which creates entirely new custody considerations for investors who previously relied solely on self-custody solutions.”
Regulations also raise the stakes of wrench attacks, per Wang. Better regulatory frameworks with more jurisdictions “proactively setting robust regulations” will “inevitably lead to more severe law enforcement actions, which will significantly increase the cost of such attacks and fundamentally curb such behaviors.”
“We see the physical attacking as a temporary challenge,” Wang concluded.
The crypto industry has evolved through many stages, but the rise of wrench attacks on prominent investors and executives shows that it has yet to reach the maturity of traditional financial markets.
In the meantime, executives are not only moving their assets to centralized and decentralized custodians but also finding muscle of their own. Personal security firms have also seen an uptick in interest from crypto’s elite to protect their homes and persons.
Magazine: Robinhood’s tokenized stocks have stirred up a legal hornet’s nest
