Guilty Pleas in Connecticut Bitcoin Kidnapping Highlight the Rise of "Wrench Attacks"

Two more men have pleaded guilty in connection with a violent 2024 kidnapping in Danbury, Connecticut that prosecutors tied to a plan to steal Bitcoin. Saif Faiq, 22, of St. Louis, pleaded guilty on June 8, 2026 to conspiracy to interfere with commerce by robbery, a federal charge carrying up to 20 years in prison. Adam Iza, 25, of California, entered a guilty plea to the same charge in Bridgeport federal court the week before.

What happened in Danbury

On August 25, 2024, six men carjacked a Lamborghini Urus in Danbury and abducted the couple inside. According to the Justice Department, the victims were the parents of an individual who had taken part in a theft of hundreds of millions of dollars' worth of Bitcoin — making the kidnapping an attempt to use family members as leverage over someone else's crypto fortune. Danbury police arrested the attackers the same day, and all six have since pleaded guilty.

Court documents describe Iza as directing parts of the operation over encrypted messaging apps and providing funding, while Faiq helped recruit participants and conduct surveillance on the victims. Both face sentencing later this summer.

What a wrench attack is

Crimes like this are known in the crypto world as wrench attacks — a tongue-in-cheek reference to the idea that a criminal does not need to defeat cryptography when a $5 wrench and a threat will extract someone's passwords. Unlike a hack, the target is a person, not a system: victims are coerced into handing over private keys, recovery phrases, or wallet access.

The trend is moving in the wrong direction. Blockchain security firm CertiK verified 72 physical-coercion incidents worldwide in 2025, a 75 percent increase over the prior year, and counted 34 more in just the first four months of 2026, with estimated losses topping $100 million. Europe accounts for the large majority of recent cases, with France the most affected country. Researchers also note that more than half of this year's incidents targeted relatives of the intended victim — exactly the pattern seen in Danbury.

Lessons for ordinary holders

Most readers will never hold enough crypto to attract this kind of crime, but the underlying lessons scale down to everyone. Criminals increasingly find targets through leaked personal data — names, home addresses, and financial details bought from data brokers or exposed in breaches — rather than physical stakeouts. That makes discretion a genuine security measure: avoid publicizing holdings on social media, be cautious about linking your identity to wallet addresses, and treat any unexpected contact about your crypto as hostile until proven otherwise.

It is also a reminder that self-custody concentrates risk on you personally. Splitting holdings across wallets, using multi-signature arrangements for large amounts, and never keeping a recovery phrase where a home intruder could find it all reduce what any single act of coercion can take.

Sources

• Missouri Man Admits Role in Cryptocurrency Robbery Scheme (US Department of Justice)
• California and Missouri Men Charged in Danbury Kidnapping Conspiracy (US Department of Justice)
• 2026 Wrench Attacks Overview (CertiK)