Briefs.Co Surge in Wrench Attacks Targeting Crypto Holders Amid Data Breaches
Article Content
- •Over $30 million has been stolen in wrench attacks in 2026 as of mid-August.
- •A data breach at ShipMonk exposed personal information of 11,742 Trezor customers.
- •Wrench attacks have increased by 75% in 2025, with criminals targeting high-net-worth individuals.
In 2026, violent crypto attacks, known as wrench attacks, have surged, with over $30 million stolen from holders by mid-August. A data breach at shipping provider ShipMonk exposed personal information of 11,742 Trezor customers, increasing their risk of phishing and physical attacks. The breaches at shipping firms have highlighted vulnerabilities in the supply chain, leading to warnings from hardware wallet manufacturers Trezor and SafePal. The nature of these attacks has evolved, with criminals now targeting individuals' homes to extract sensitive information like crypto seed phrases. In 2025, CertiK reported a 75% increase in wrench attacks, with losses exceeding $40 million. The trend indicates a growing threat landscape for crypto holders, particularly those using hardware wallets.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track ShipMonk in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Citrix NetScaler Critical Vulnerabilities Exploited: Urgent Patching Required Citrix NetScaler ADC and Gateway products are affected by critical vulnerabilities CVE-2026-88771 and CVE-2026-88772, both assigned a CVSS score of 9.5. The Cybersecurity and Infrastructure Security Agency (CISA) added these CVEs to its Known Exploited Vulnerabilities catalog on September 27, 2026, and mandated… 
Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited Citrix disclosed two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, affecting NetScaler ADC and Gateway systems, which are being actively exploited. Both vulnerabilities have a CVSS score of 9.5 and allow unauthenticated attackers to execute arbitrary commands remotely. CVE-2026-88771 arises…