Incident Overview: Assault on a Madrid Street
Around 11 p.m. on Monday, July 1, 2026, a Canadian cryptocurrency millionaire was targeted outside Lobito de Mar, a high-end restaurant owned by chef Dani García, located at the intersection of Calle Claudio Coello and Calle Jorge Juan in the Salamanca district of Madrid. Three men pepper-sprayed the victim and forcibly threw him into a Ford Transit van. Bystanders and nearby residents quickly alerted the Spanish National Police.
Officers tracked the vehicle to Ronda de Toledo, about 15 minutes away, and arrested two suspects. One escaped and remains at large. The arrested individuals were identified as Serbian nationals, aged 33 and 45, with no prior criminal record.
Kidnappers' Tools and Investigation Details
Investigators determined the attackers intended to force the victim to disclose his cryptocurrency wallet passwords and private keys, aiming to steal his digital assets—estimated to be worth millions. They also attempted to steal his €100,000 luxury watch.
The van had a modified license plate and was rented specifically for the abduction. Inside, police found plastic zip ties, sedative pills, and firearms, indicating a premeditated plan. GPS data recovered from the vehicle showed the kidnappers planned to transport the victim to Petrer, a town in the Alicante province. During the chaos, the victim managed to free himself from the zip ties, flagged down a taxi, and went to La Princesa Hospital for treatment of injuries from the initial assault.
Police learned that the attackers had followed the businessman from Barcelona, where he had traveled to finalize a cryptocurrency deal. Surveillance footage and digital evidence are being reviewed to identify any additional collaborators or prior surveillance.
Rising Trend of Wrench Attacks on Crypto Holders
This kidnapping aligns with a broader surge in physical attacks targeting cryptocurrency holders across Europe. Security experts refer to these as 'wrench attacks,' where criminals use coercion or violence to obtain wallet seed phrases or private keys.
In France alone, 11 similar incidents have been reported in 2026. Unlike traditional bank accounts, digital assets offer high liquidity, fast transferability, and pseudonymity, making them attractive to criminals. The public visibility of crypto entrepreneurs—often flaunting wealth on social media or at industry events—makes them prime targets for organized gangs.
Safety Warnings and Ongoing Investigation
Police continue to search for the third suspect and have appealed to the public for information. The investigation remains active, with officers examining video footage, vehicle forensics, and digital traces to determine if the plot involved a larger network or extended monitoring.
This incident serves as a stark reminder for cryptocurrency holders: physical security is as critical as digital security. Avoid public displays of wealth, never share private keys or seed phrases under duress, and consider professional security measures if holding significant assets. For those involved in high-value transactions, maintaining a low profile and varying routines can reduce the risk of being tracked.