VEYRNOX · Learn · Wrench Attack
Wrench Attack
A wrench attack is a physical-coercion crypto theft in which an attacker forces a victim to unlock their wallet and transfer assets under threat of violence. It is named after the observation that a $5 wrench defeats a $500 hardware wallet.
How it works
The attacker identifies a target with observable crypto holdings — often through social media, ostentatious spending, or leaked KYC data — and confronts them physically. The victim is compelled to unlock their wallet, approve outgoing transactions, or hand over seed phrases. Because the victim performs each cryptographic step voluntarily under duress, no security control that trusts the user’s intent can distinguish a coerced transaction from a normal one. Once funds move to an attacker-controlled address, on-chain settlement is irreversible.
Why it matters
Wrench attacks are rising as crypto ownership becomes visible. High-net-worth holders, DeFi power users, and public founders have been kidnapped or home-invaded. Better UX, seed-phrase removal, and hardware isolation do nothing here — the human is the compromised component. Only defences that assume the user cannot be trusted at unlock (duress PIN, decoy wallets) meaningfully reduce loss.
Related concepts
- Duress PIN — A duress PIN is a secondary passcode that unlocks a decoy view of a wallet when the user is under physical or psychological coercion.
- Coercion Resistance — Coercion resistance is a wallet property that limits the loss a user can be forced to authorise under duress.
- Panic Wipe — Panic wipe is an emergency wallet feature that erases on-device keys and cached state when triggered, leaving no recoverable material on the phone.
- Self-Custody — Self-custody is the practice of holding your own cryptographic keys rather than delegating custody to an exchange or custodian.
Frequently asked questions
Are wrench attacks common?
They are rising. Documented cases include home invasions in France, kidnappings in the US and UK, and armed robberies at crypto events.
Can a hardware wallet stop a wrench attack?
No. A hardware wallet protects keys from remote attackers, not from a physical attacker who can force you to unlock it.
What defences actually work?
Duress PIN and decoy wallets, low OpSec (do not advertise holdings), and small hot balances with the rest in socially-recoverable cold storage.
In Veyrnox
Veyrnox treats wrench attacks as a first-class threat. Coercion Resistance on Safety Plus provides a duress PIN that unlocks a decoy vault, so a coerced unlock reveals a spendable-but-limited wallet instead of the real one. This is not a marketing feature — it is the answer to the specific attack class where cryptography alone fails.