--:-- Annie Minoff: Welcome to The Journal, our show about money, business, and power. I'm Annie Minoff. It's Friday, June 20th.
--:-- Sam Schechner: The attack happened early, on a Tuesday morning in Paris. It's maybe 8:30 in the morning. People are taking their kids to school or daycare. Businesses are opening up. People are having their coffee.
--:-- Annie Minoff: Our colleague, Sam Schechner, is going to walk us through what happened.
--:-- Sam Schechner: A white delivery van pulls up, and three men dressed in black masks jump out and grab a 34-year-old woman while she's walking with her husband and her two-year-old toddler. Onlookers captured the attack on video.
--:-- Sam Schechner: They pepper spray the family and try to drag her into that truck. And she screams. And the husband throws himself in front of her and grabs onto her for dear life and won't let go.
--:-- Sam Schechner: And they're trying to pull her away. She's screaming, "Help, help, help." And, "Let go of me. Let go of me, damn it."
--:-- Sam Schechner: Eventually, more people start coming, and a guy who runs a bike shop right nearby runs out of the building holding a fire extinguisher.
--:-- Sam Schechner: And he kind of runs at the attackers, and they just hopped in the back of that white van and sped off, while the bike shop owner just sort of threw the fire extinguisher after them, just barely missing the back of the van as it sped around the corner.
--:-- Annie Minoff: The assailants fled the scene, leaving the woman, her bloodied husband, and her toddler behind. Why did this happen?
--:-- Sam Schechner: This 34-year-old woman, her father, is the CEO of a company called Paymium, which is a cryptocurrency exchange based in France.
--:-- Sam Schechner: And investigators believe that the kidnappers were attempting to kidnap her in order to get him to pay a large ransom in cryptocurrency.
--:-- Annie Minoff: Okay, so this was an abduction attempt with the idea of extorting the father. This was an old-school abduction extortion with the new-school twist that what they wanted to be paid in was crypto.
--:-- Sam Schechner: This trend of using violence in the physical world to access someone's online wealth has a name. It's called a wrench attack.
--:-- Sam Schechner: And wrench attacks on people who own millions in crypto have been growing across the globe.
--:-- Annie Minoff: Another suspect was arrested in the Bitcoin kidnapping and torture case in Manhattan.
--:-- Sam Schechner: Three teens accused of kidnapping and robbing a man out of millions of dollars in cryptocurrency.
--:-- Sam Schechner: It comes after a series of kidnappings in Europe targeting crypto magnates.
--:-- Annie Minoff: Welcome to The Journal, our show about money, business, and power. I'm Annie Minoff.
--:-- Annie Minoff: It's Friday, June 20th. Coming up on the show, a new violent era of crypto crime.
--:-- Annie Minoff: The full term for a wrench attack is a $5 wrench attack, and it stems from a comic strip on XKCD, an online web comic that often covers science and tech.
--:-- Sam Schechner: In this two-panel comic, titled Security, two stick figures are trying to hack into someone's crypto account.
--:-- Sam Schechner: The first panel depicts, quote, a crypto nerd's imagination. One of the stick figures says, "His laptop's encrypted. Let's build a million-dollar cluster to crack it."
--:-- Sam Schechner: And the other stick figure says, "No good. It's 4096-bit RSA."
--:-- Sam Schechner: And then the first one says, "Blast! Our evil plan is foiled."
--:-- Sam Schechner: The other panel is titled, "What Would Actually Happen?"
--:-- Sam Schechner: One stick figure says to the other, "His laptop's encrypted. Drug him and hit him with this $5 wrench until he tells us the password."
--:-- Sam Schechner: The other one takes the wrench and says, "Got it. So it kind of the brute force approach. Yeah, literally brute force. Not the crypto brute force approach but literal brute force."
--:-- Annie Minoff: The crypto thefts that you usually hear about happen online with hackers who break into exchanges, or scammers who fish people through text messages.
--:-- Sam Schechner: But there's always been the more straightforward approach. Violence.
--:-- Annie Minoff: And this year, wrench attacks have been on the rise.
--:-- Sam Schechner: That's for a few reasons. One, crypto is more valuable and more worth stealing than ever before.
--:-- Sam Schechner: Prices are way up, especially for Bitcoin, which is currently valued at over $100,000.
--:-- Sam Schechner: But another reason is that it's just harder to steal crypto online these days.
--:-- Sam Schechner: The crypto rich have gotten savvier about where and how they store their keys, the string of numbers and letters that gives someone access to their crypto wallet.
--:-- Sam Schechner: Increasingly, what crypto enthusiasts do is something called self-custody, which means that you keep it offline, air-gapped, away from the Internet.
--:-- Sam Schechner: There are devices that help you do this. I mean, the old-school way would be to write your key down in a notebook, but, you know, the keys are very long.
--:-- Sam Schechner: So instead, you usually have a device that you keep the keys offline, in your pocket, or in a safe somewhere.
--:-- Annie Minoff: That might insulate you from an online attack, but it won't help you if, for instance, someone breaks into your home and threatens you with violence if you don't give up your key.
--:-- Sam Schechner: Who's being targeted in these attacks?
--:-- Sam Schechner: The main through line we see is people who are well known for having a lot of crypto.
--:-- Sam Schechner: People like crypto influencers. I've made over a million dollars from crypto.
--:-- Sam Schechner: Here's my exact trade. I made $2 million in 10 months with Bitcoin.
--:-- Sam Schechner: I'm sitting in this bed in the studio apartment and I just became a millionaire.
--:-- Annie Minoff: Talking about your crypto wealth online, being an online influencer, a crypto influencer, is becoming a more dangerous game these days.
--:-- Sam Schechner: A French influencer named Killian Desnos learned just how dangerous a few years ago.
--:-- Sam Schechner: Killian Desnos, who is known online as Tuffer, he was a YouTube and Twitch streamer.
--:-- Sam Schechner: Tufor was well known for his crypto holdings.
--:-- Sam Schechner: In August of 2023, two people kidnapped Desnos' father from his house in France.
--:-- Sam Schechner: One of them was dressed as an Amazon delivery driver.
--:-- Sam Schechner: They sent Desnos a ransom video showing his father bound with a gun to his head.
--:-- Sam Schechner: Desnos paid the ransom, and his father was freed.
--:-- Annie Minoff: And this is because Tuffer was a little bit braggy online about his crypto wealth? Is that?
--:-- Sam Schechner: Well, you know, that certainly seems to be the case.
--:-- Sam Schechner: And indeed, Tuffer said that he sort of blamed himself.
--:-- Sam Schechner: You know, he said on X that maybe he should have been more secretive.
--:-- Sam Schechner: And after the recent kidnapping attempt in Paris, he wrote again on X that these kidnappings remind him of what happened to his family.
--:-- Sam Schechner: And that he actually got out of crypto.
--:-- Annie Minoff: At least two people were later arrested and faced preliminary charges in the case.
--:-- Sam Schechner: Another group that's been targeted in wrench attacks are crypto entrepreneurs and executives known to have crypto wealth.
--:-- Sam Schechner: And the pool of victims comes from around the world.
--:-- Sam Schechner: Last July, an Australian crypto billionaire narrowly escaped abduction in Estonia.
--:-- Sam Schechner: In March, a Houston crypto influencer's husband got into a shootout with home invaders demanding her laptop.
--:-- Sam Schechner: And just last month, there was a big case in New York City.
--:-- Sam Schechner: Police made a second arrest in an alleged cryptocurrency kidnapping scheme in New York City.
--:-- Sam Schechner: Two men allegedly tortured an Italian man for weeks in an apartment to try to get it as crypto.
--:-- Annie Minoff: And then there was a case earlier this year that shocked the crypto world.
--:-- Sam Schechner: Before it ended, somebody would be missing a finger.
--:-- Sam Schechner: That's next.
--:-- Sam Schechner: It happened sometime before sunrise in central France.
--:-- Sam Schechner: David Ballon and his partner were kidnapped brutally at gunpoint.
--:-- Sam Schechner: They were separated, put in different vehicles, and driven off.
--:-- Sam Schechner: David Ballon is one of France's crypto elite.
--:-- Sam Schechner: He helped found a crypto company called Ledger.
--:-- Sam Schechner: Within hours of the abduction, other Ledger co-founders had heard from one of the kidnappers.
--:-- Sam Schechner: He wanted a ransom of 10 million euros to be paid in a cryptocurrency called Tether.
--:-- Sam Schechner: And his messages made it clear that he wasn't messing around.
--:-- Sam Schechner: Very quickly, they escalated to the point of showing a video of Ballon as his finger was cut off.
--:-- Sam Schechner: Oh my gosh. He had his pinky finger severed by one of the assailants.
--:-- Sam Schechner: And, you know, others showed him in emotional distress, what looked like a gun to his head.
--:-- Sam Schechner: Ballon's friends, his co-founders, went to the police.
--:-- Sam Schechner: And together, they'd embark on a multi-pronged strategy.
--:-- Sam Schechner: Part one was to start paying some of the ransom to buy police time to find Ballon and his partner.
--:-- Sam Schechner: And part two involved trying to get those ransom payments back.
--:-- Sam Schechner: They had connections to kind of get directly to Tether and to some of the exchanges that were involved so that they could get the cryptocurrency back as soon as the hostages were freed.
--:-- Sam Schechner: The idea was that as soon as Belon and his partner were safe, the co-founder's contacts would pull back the ransom payments and recover the money.
--:-- Sam Schechner: And that meant that they basically had to stay on a vigil because they didn't know when they would be freed.
--:-- Sam Schechner: And so you had some of the people, you know, on this team to claw back the ransom who were up 24-7.
--:-- Sam Schechner: And, you know, there was always somebody on duty waiting for the call.
--:-- Sam Schechner: And they were following in real time as police raided one house. Nope, he's not there.
--:-- Sam Schechner: Another house. Nope, he's not there.
--:-- Sam Schechner: And then finally. Police raided a farmhouse in the French countryside.
--:-- Sam Schechner: And they found Ballon. David is freed.
--:-- Sam Schechner: And they're almost ready to push the button, basically, and make the call to claw back the crypto.
--:-- Sam Schechner: And then it turns out that the partner's not there.
--:-- Sam Schechner: They'd have to wait until Ballon's partner was found to claw back the ransom.
--:-- Sam Schechner: But they didn't wait long.
--:-- Sam Schechner: They made another ransom payment, and she was discovered the following day, in a van at a road stop an hour and a half north of the farmhouse where police had found Ballon.
--:-- Sam Schechner: She was shaken, but okay.
--:-- Sam Schechner: And so that story had a happy ending.
--:-- Sam Schechner: But, you know, with the caveat that it was a pretty harrowing experience for both of them.
--:-- Sam Schechner: Devied was one finger short, and he actually later posted to social media on his profile that, you know, it was like the, he wrote like, kidnapping championship 2025, fingers nine out of ten.
--:-- Annie Minoff: In total, Ballan's friends clawed back most of the three million euros in crypto that they'd sent as a ransom.
--:-- Sam Schechner: It's interesting that the ability to transfer huge amounts of money instantly with crypto kind of facilitates this kind of crime.
--:-- Sam Schechner: It makes it attractive.
--:-- Sam Schechner: At the same time, in this case, the crypto was able to be clawed back almost just as instantly.
--:-- Annie Minoff: Yeah, it is an interesting duality.
--:-- Sam Schechner: I think a lot of criminals and people in the world in general think crypto is anonymous.
--:-- Sam Schechner: Crypto is, you know, suited to crime.
--:-- Sam Schechner: But in fact, in a lot of cryptocurrencies, every transaction is public.
--:-- Sam Schechner: And so that actually makes it really a treasure trove of information for investigators.
--:-- Sam Schechner: And it does make it a little bit more difficult to launder that money once it's stolen.
--:-- Annie Minoff: Did the attackers get away with it? Are they still at large?
--:-- Sam Schechner: Well, when they freed Belong, they arrested a bunch of people.
--:-- Sam Schechner: And another 25 people were arrested in recent days and many of them were charged as linked to more recent kidnappings and others.
--:-- Sam Schechner: So the question is, are they the organizers or are they just, as they'd say in French, petit mains, little helpers?
--:-- Sam Schechner: And it does seem that most of them are young.
--:-- Sam Schechner: Some of them are minors.
--:-- Sam Schechner: They're recruited online.
--:-- Sam Schechner: They don't actually know the entirety of the scheme.
--:-- Sam Schechner: They just hired guns.
--:-- Sam Schechner: Yeah, they hired guns.
--:-- Annie Minoff: Unfortunately, it means that the people who are profiting from the crime may still be at large.
--:-- Sam Schechner: A few weeks ago, Moroccan authorities arrested a 24-year-old French man, who they suspect was a ringleader in some of the recent abductions.
--:-- Sam Schechner: The theory among investigators in France is that these cases are linked.
--:-- Sam Schechner: One of the people who was actually arrested in the Killian Desnos case is suspected to have actually been in contact while in prison with the kidnappers in the Ballant case.
--:-- Annie Minoff: Interesting.
--:-- Sam Schechner: Okay. Then the question is, is that person, is that guy who himself is pretty young, in his 20s, was he the one who was in charge or is he also a hired hand?
--:-- Sam Schechner: Despite these recent arrests, the risk of wrench attacks seems to be growing.
--:-- Sam Schechner: That's because people who own crypto are increasingly seeing their personal information leaked online.
--:-- Sam Schechner: A few years ago, Ledger, the crypto company Belong co-founded, had one of its databases hacked.
--:-- Sam Schechner: Information for over 200,000 customers was made public.
--:-- Sam Schechner: A person familiar with the Ledger breach said that Belong's home address wasn't included in that information.
--:-- Sam Schechner: And earlier this year, Coinbase, a major American crypto exchange, was also hacked.
--:-- Sam Schechner: Coinbase basically came out and said that as many as 97,000 customers had had their personal information stolen from them.
--:-- Sam Schechner: And that included things like their balance snapshots.
--:-- Sam Schechner: So, you know, how much crypto they have.
--:-- Sam Schechner: How much crypto they have, which is basically the target on your back.
--:-- Sam Schechner: Right.
--:-- Sam Schechner: But also their addresses in some cases.
--:-- Sam Schechner: And, you know, the company said that data had been likely stolen by a bribed contractor or possibly employees who are working customer support.
--:-- Annie Minoff: So this is information that says, here's exactly how much crypto these people have.
--:-- Sam Schechner: Here's how rich they are.
--:-- Sam Schechner: Here's where to find them.
--:-- Annie Minoff: Exactly.
--:-- Sam Schechner: In some cases, at least, that's the information that was hacked.
--:-- Sam Schechner: Coinbase said it's working with law enforcement to investigate the incident and is taking other measures to harden its defenses.
--:-- Annie Minoff: What do these wrench attacks say to you about kind of the moment we're in with crypto?
--:-- Sam Schechner: That's a good question.
--:-- Sam Schechner: What do they say to me about the moment we're in with crypto?
--:-- Sam Schechner: It shows how crypto is becoming that much more important and mainstream.
--:-- Sam Schechner: The value of assets and crypto has grown significantly.
--:-- Sam Schechner: It's become a magnet for criminals.
--:-- Sam Schechner: And yet, at the same time, more and more people are holding it, which creates a wealth of new targets.
--:-- Sam Schechner: It's also a sign that perhaps it's still a somewhat immature ecosystem.
--:-- Sam Schechner: One of the things that's most attractive about crypto is that it does not rely on the traditional banking system.
--:-- Sam Schechner: And it allows you to basically conduct transactions with people you don't trust without having to rely on a trusted third party.
--:-- Sam Schechner: That you can live your life without the need for some central authority.
--:-- Annie Minoff: The question is, you know, how much that vision of a distributed world coincides with the sort of security that we expect today.
--:-- Annie Minoff: Transcription by CastingWords Mendoza, Laura Morris, Enrique Perez de la Rosa, Sarah Platt, Alan Rodriguez Espinosa, Heather Rogers, Pierce Singhe, Jivika Verma, Lisa Wang, Catherine Whalen, Tatiana Zamis, and me, Annie Minoff.
--:-- Annie Minoff: Our engineers are Griffin Tanner, Nathan Singapak, and Peter Leonard.
--:-- Annie Minoff: Our theme music is by So Wiley.
--:-- Annie Minoff: Additional music this week from Marcus Begala, Peter Leonard, Bobby Lord, Emma Munger, Nathan Singapak, and Griffin Tanner.
--:-- Annie Minoff: Fact-checking by Mary Mathis, Jennifer Gorin, and Kate Gallagher.
--:-- Annie Minoff: Thanks for listening. See you on Monday.