Crypto Trader Stabbed in $600K Wrench Attack Robbery

On September 7, a crypto trader in Herzliya, Israel, became the latest victim in a disturbing global trend of physical attacks targeting cryptocurrency holders. According to prosecutors from the Tel Aviv District Attorney’s Office, three assailants ambushed the father of two in his apartment building’s stairwell, forcing him inside his home at approximately 7:30 PM local time. The attackers, led by repeat offender Murad Mahajna of Tel Aviv, bound the victim’s hands with cables and subjected him to a brutal beating that lasted over an hour.

The violence escalated dramatically when the victim refused to surrender his wallet credentials. Prosecutors detailed that one assailant grabbed a kitchen knife and held it to the victim’s neck while Mahajna delivered an ominous warning: “Let me get you out of this incident alive.” The threat was followed by action as the victim was stabbed twice—once in each leg above the knee—before he finally yielded access to his cryptocurrency accounts. The attackers’ initial demand had been staggering: 500 BTC worth approximately $61 million, though they ultimately settled for what they could access from the victim’s holdings.

Beyond the cryptocurrency theft, the assailants demonstrated meticulous planning by cleaning the crime scene with disinfectant before fleeing. They seized a $50,000 Rolex watch, a laptop, a Trezor hardware wallet, €5,000 in cash, and several thousand shekels. The victim’s fear for his family’s safety kept him silent for several days before he confided in relatives, who urged him to contact authorities. Investigators subsequently arrested Mahajna on September 10 using recorded calls, voice analysis, and security camera evidence from the building.

The Herzliya incident represents the 52nd documented “wrench attack” globally in 2025, according to security researcher Jameson Lopp, who maintains a comprehensive database tracking these physical assaults on crypto holders. At the start of the year, Lopp had predicted that 2025 would reach “an all-time high for wrench attacks and we’d average one per week”—a forecast that has proven accurate based on current data. September alone witnessed four such attacks worldwide, indicating an accelerating trend rather than an isolated phenomenon.

These attacks follow a consistent pattern: criminals identify cryptocurrency holders through various means, then use physical violence or threats of violence to coerce victims into transferring digital assets. The term “wrench attack” derives from the concept that while digital security might protect against remote hacking, it cannot defend against someone with a physical weapon. The Herzliya case exemplifies this vulnerability, showing how even sophisticated crypto security measures like hardware wallets can be compromised when owners face direct physical threats.

Recent international incidents underscore the global nature of this security crisis. Last month, French authorities deployed 150 gendarmes to rescue a 20-year-old Swiss man found tied up in a house near Valence’s high-speed train station in another wrench attack. These coordinated international responses highlight both the severity of the threat and the challenges law enforcement faces in combating crimes that cross jurisdictional boundaries and involve rapidly moving digital assets.

Security experts and industry leaders point to systemic issues that exacerbate the wrench attack problem. Mehow Pospieszalski, CEO of decentralized wallet platform AmericanFortress, told Decrypt that weak cooperation between the crypto community and authorities has worsened the situation. He cited “law enforcement not exactly proactive about protecting founders” and a “vibe of mistrust” from the crypto side that hinders the very coordination needed to catch such criminals.

Pospieszalski’s security recommendations reflect the grim reality facing crypto holders: “My advice is to obscure any physical data and conceal carry, and unfortunately, in most of the world, you can’t do the latter.” This acknowledgment that conventional self-defense options are limited in many jurisdictions leaves crypto owners with few practical protections beyond operational security—concealing their crypto holdings and avoiding behaviors that might identify them as targets.

The financial implications extend beyond individual victims to the broader cryptocurrency ecosystem. As wrench attacks become more frequent and publicized, they may deter mainstream adoption by highlighting vulnerabilities that traditional financial systems don’t face. The transfer of $547,260 in Bitcoin and $42,248 in USDT during the Herzliya attack demonstrates how quickly substantial wealth can be moved irreversibly under duress, creating unique challenges for recovery and law enforcement intervention compared to traditional asset theft.