CertiK's H1 2026 report recorded 52 verified wrench attacks globally worth $124.1 million, with France accounting for 33 incidents, 63.5% of the total. Home invasions rose to 41% of cases from 14% a year earlier. French victims were local residents in 93% of cases, and relatives were targeted in more than 40%. The average take per successful incident jumped from $270,000 to $2.39 million.
Regulatory pressure is also mounting. The EU's DAC8 directive and the OECD's Crypto-Asset Reporting Framework (CARF) took effect January 1, 2026, requiring crypto service providers to report detailed client data to tax authorities, with the first automatic exchange scheduled for September 2027. Critics argue that centralizing such data without commensurate security creates a "honeypot" for criminals, while officials maintain the rules are necessary for tax transparency.
What to Watch
ANSSI, France's national cybersecurity agency, is investigating the DGFiP intrusion. The immediate risk for the 678,000 exposed taxpayers is credentialed phishing and identity fraud, since callers can now quote details only the tax administration should hold. For crypto holders, the question is whether the enlarged pool of verified wealth data will sustain the current pace of physical attacks through the second half of 2026.
Sources: Source 1 · Source 2 · Source 3 · Source 4 · Source 5 · Source 6
