Blockchain security firm PeckShield flagged address 0xd2e8...ca41 (@Sillytuna) for a $24 million outflow of aEthUSDC, initially labeling it an address poisoning attack. But Sillytuna quickly refuted: “NOT address poisoning.” He revealed the theft was the result of a brutal physical assault — attackers used weapons, kidnapping threats, and direct coercion to force him to hand over private keys.
$24M Stolen at Gunpoint: The Reality Behind the Alert
PeckShield traced roughly $20 million in DAI to two staging wallets (0xdCA9...c9C4 and 0xd0c2...dd3e) and noted small bridging to Arbitrum. The usual digital scam profile didn’t fit. Sillytuna said the criminals threatened his family and physically attacked him on the spot. Police are now investigating.
This is a textbook crypto wrench attack — physical violence or intimidation to force victims to unlock wallets or transfer funds. Cold wallets, multisig, and 2FA provide zero protection when attackers target the person, not the system.
2025: 75% Spike, 72 Verified Cases, Over $40M Lost
According to CertiK’s Skynet report, documented crypto wrench attacks jumped from ~40 in 2024 to 72 in 2025, a 75% increase. Confirmed losses exceeded $40 million. Physical assaults rose 250% year-over-year. Kidnapping was the dominant method (≈25 cases). Europe accounted for over 40% of global incidents.
High-profile cases include the kidnapping of David Balland and his wife in France, a Vancouver home invasion stealing $1.5M in BTC, and a Ukrainian deputy mayor’s son beaten and burned alive. Multiple family-hostage situations occurred in the U.S. Security researchers believe many victims avoid reporting, so true numbers are higher.
2026 Already Accelerating: 11 Cases in January–February
The trend continues in 2026. As of early March, at least 11 cases were recorded in the first two months alone. Criminals increasingly target individuals perceived as “newly rich” from bull markets.
Safety Measures: Layer Wallets, Time Locks, Stay Off Radar
Security experts recommend: never flaunt crypto wealth online; use separate emails and phone numbers for crypto activity; set up multi-signature wallets with keys in different locations; enable time-lock features to delay large transfers; keep a small “visible” wallet while hiding the bulk behind a passphrase-protected hidden wallet. If threatened, comply to stay safe, then report immediately.
The Sillytuna case underscores a shift in crypto crime — digital defenses mean nothing against physical coercion. As adoption grows, personal security deserves the same attention as seed phrase protection.