CertiK: physical attacks on crypto holders rose 75% YoY to 72 confirmed cases and $41M in known losses in 2025; Coinbase spent ~$7.6M to protect Brian Armstrong
After a year of kidnappings, assaults and armed home invasions targeting cryptocurrency holders, the industry is racing to harden its defenses.
Context & Ripple Effects
Related coverage had already documented the industry’s response to kidnappings, including heightened security at conferences, bodyguards, armored vehicles and social-media monitoring. A subsequent account traced some crypto-focused criminals’ evolution from SIM swaps to coordinated home invasions and kidnappings.
The new CertiK figures put scale behind that security shift, while Coinbase’s protection spending shows that the risk is reaching major public-facing industry figures rather than remaining solely a cybercrime problem.
First-order effects
- Crypto holders and prominent executives face higher personal-security costs and greater pressure to reduce public exposure, especially around events and online disclosures.
- Coinbase is directly affected through elevated executive-protection spending for Brian Armstrong, alongside the operational burden of securing high-profile personnel.
Second-order effects
- Exchanges, custody providers and conference organizers are likely to treat physical-risk controls as a more standard operating requirement, extending spending beyond conventional cybersecurity.
- The threat model shifts for users: safeguarding wallets, identity data and personal-location information becomes intertwined, increasing demand for privacy and security services around crypto ownership.
Third-order effects
- If physical attacks continue to rise, crypto security will increasingly be evaluated as an end-to-end custody and personal-safety issue, not only as protection against wallet exploits and platform hacks.
- The pattern could widen the cost gap between large, well-resourced platforms and smaller firms or individual holders that cannot readily fund comparable security measures.
The trend: Crypto’s expanding attack surface is moving from purely digital theft toward combined cyber, identity and real-world coercion risks.