TLDR:
The paper *"Investigating Wrench Attacks: Physical Attacks Targeting Cryptocurrency Users"* presents the first comprehensive study on wrench attacks—real-world physical attacks used to coerce cryptocurrency users into handing over their digital assets.
### Summary of the Paper:
#### *Definition & Origin*
* The term "\$5 wrench attack” originates from a webcomic and refers to using physical coercion (like a wrench) instead of complex hacking to obtain information such as crypto keys.
* The paper defines wrench attacks as *intentional physical attacks to unlawfully obtain cryptocurrencies* via coercion or violence, combining crimes against both persons and property.
#### *Methodology*
* *Data triangulation* from:
* 10 **interviews** with victims and experts
* 146 **news articles**
* 37 **online forums** (672 posts analyzed)
* *Crime script analysis* was used to map how such attacks are prepared, executed, and concluded.
#### *Key Findings*
* Attackers range from *organized crime groups* to *friends, family*, and *even corrupt law enforcement*.
* Victims are often *public figures, early adopters*, or participants in *peer-to-peer (P2P) crypto transactions*.
* Attacks include *robbery, kidnapping, murder, blackmail*, and a new category: *cryptocurrency-facilitated domestic economic abuse*.
* *No user is immune*, including security-savvy individuals.
* Attacks have *increased over time*, especially during market booms (e.g., 2017, 2021).
* Victims often *do not report attacks*, fearing revictimization or police inaction.
#### *Security Insights*
* Most victims had *used centralized exchanges* and undergone *KYC* processes, potentially exposing their identity and holdings.
* Wrench attacks *bypass digital security*—no software or hardware defense can prevent coercion under threat.
* Victim behaviors (e.g., displaying crypto apps in public, sharing wealth) can unintentionally increase risk.
#### *Recommendations*
* *For Users:*
* Keep a **low profile** about crypto holdings.
* Use **multi-signature wallets**, **distributed fund storage**, and **plausible deniability mechanisms**.
* Exercise caution during **P2P transactions** and avoid carrying large amounts of crypto assets.
* *For Industry & Regulators:*
* **Reevaluate KYC policies**—data leaks can serve as “shopping lists” for attackers.
* Implement **transaction delays** or **alerts** for large withdrawals to thwart coercion.
* Improve **wallet UI/UX** to prevent exposing sensitive information (e.g., display balance).
#### *Contributions*
* Introduces the first *formal legal definition* of wrench attacks.
* Identifies *seven forms* of wrench attacks.
* Provides *actionable policy and design recommendations* for reducing risk.
---
This research highlights the *growing intersection of physical crime and digital assets*, calling for urgent changes in user behavior, system design, and policy to mitigate this underreported but increasingly relevant threat.