Cointime

Download App
iOS & Android

Chainalysis CEO offers a clue into the recent spate of Paris crypto attacks

Validated Media

Some criminal organizations are yet to receive the memo — crypto is traceable — and could explain the recent string of crypto-related kidnappings, says Chainalysis CEO Jonathan Levin. 

Law enforcement has been increasingly successful at tracing stolen funds and crypto ransom payments, resulting in a “lot of arrests,” Levin said during the 2025 Consensus crypto conference, covered by Cointelegraph.

“For whatever reason, there is a perception that’s out there that crypto is an asset that is untraceable, and that really lends itself to criminals acting in a certain way,” he said. 

“Apparently, the know that crypto is not untraceable hasn't been received by some of the organized crime groups that are actually perpetrating these attacks, and some of them are concentrated in, you know, France, but not exclusively.” 

Jonathan Levin (left) says criminals targeting the crypto industry should know that the funds are traceable and law enforcement can track them. Source: Cointelegraph

There have been two serious crypto-related attacks in Paris so far this month. On May 13, three assailants attempted to kidnap the daughter and grandson of Pierre Noizat, the co-founder and CEO of French crypto exchange Paymium. 

Earlier in the month, on May 3, Paris police freed the father of a crypto entrepreneur who was held for several days as part of a 7 million euro ($7.8 million) kidnapping plot. The attacks have prompted France’s interior minister to meet with crypto professionals and address rising security concerns. 

Last year, blockchain investigator ZachXBT sounded the alarm in October that he’d been receiving messages from multiple victims of crypto home invasion thefts in Western Europe at a much higher rate than other regions.

“The message needs to get out there that these payments are traceable and that these units within the law enforcement agencies have actually been very successful at holding some of those people to account in those kidnapping cases,” Levin said.

“And even if it’s not the people that are kidnapping those people, but actually going upstream to the organized crime groups that are orchestrating these,” he added.

Online streamer Amouranth was the victim of a home invasion in March 2025 when several armed assailants held her at gunpoint and demanded the keys to her crypto wallet, four suspects were charged in connection with the incident and arrested by law enforcement.

Crypto kidnapping “not such a profitable business”

Levin says he hopes organized crime takes a message from crypto robbers being arrested, specifically, that it’s “not such a profitable business to be in,” and in some instances, the ransom payments might even be recoverable.

“There is the ability to potentially recover some of those payments as well. I think that in general, the goal here is not necessarily the recovery of the money, but it’s holding those people to account,” he said.

However, despite law enforcement having some success in tracking down criminals targeting the crypto industry, Levin says the spate of offline robberies is still a “bleak” situation, and the industry should be taking extra steps to stifle theft as well. 

“People need to be very careful about what information is shared about them online,” he said.

This year, there have been 22 recorded incidents of in-person crypto-related theft compared to 28 in 2024, according to a GitHub list created by cypherpunk and co-founder of self-custodial firm Casa, Jameson Lopp.

However, the number could be higher. A University of Cambridge study released in September last year found these so-called “wrench attacks” are often underreported due to revictimization fears. 

Comments

All Comments

Recommended for you

  • Ethereum Foundation Sells 2,785 ETH Worth Approximately $6.42 Million

    On October 26, according to monitoring by Onchain Lens, the Ethereum Foundation sold 2,785 ETH through CoW Swap for approximately $6.42 million in exchange for USDS.

  • Qatari Mediators Arrive in Tehran to Alleviate Regional Tensions

    According to an official familiar with the situation, Qatari mediators arrived in Tehran on Sunday with the aim of easing regional tensions. Qatar's mediation efforts are being conducted in coordination with the United States.

  • Musk: Future Phones Will Have No Apps or Operating Systems, Just AI Generation

    On October 25, Musk predicted that in the next 5 to 6 years, smartphones may undergo a complete transformation: traditional operating systems and apps will gradually disappear, and phones will become dedicated terminals for running AI. At that time, users will no longer need to download applications or open software; instead, they will simply tell the AI what they want, and the phone's AI will collaborate with cloud AI to generate videos, images, and various interactive content in real-time.

  • Iran: Tehran's Stance Unchanged Despite Potential New U.S. Strikes

    On October 25, Iranian Foreign Minister Zarif stated on Sunday that Iran's position will not change even if a new round of conflict erupts between Israel and the United States. This comes amid escalating tensions between Tehran and Washington. U.S. President Trump had mentioned on Friday that Washington "might come back for another small-scale 'epic fury'" military operation. Zarif remarked, "Recently, some have talked about the possibility of a new war, but I am already considering the post-war situation. Our policies will not change whether or not war occurs. They have tried twice before and have seen the results. If they want to try again, they should understand that the final outcome will be no different from the past." (Golden Ten)

  • Russia Ready to Supply Any Amount of Diesel to the U.S.

    On October 25, Russian Deputy Prime Minister Novak stated that Russia is prepared to supply any amount of diesel to the United States.

  • Egypt's Benchmark Stock Index Declines by 5%

    Egypt's benchmark stock index has expanded its decline to 5%.

  • Yemen Conflict Escalates, Saudi and Egyptian Stock Markets Decline

    On October 25, Sunday, the stock markets in Saudi Arabia and Egypt experienced declines. This followed a statement from the Saudi-led coalition indicating that, amid escalating conflicts with the Yemeni Houthi forces, the coalition intercepted several drones and missiles over Riyadh and southern Saudi Arabia. Under pressure from widespread sell-offs, the Saudi benchmark index (TASI) fell by 2.6%, marking its worst intraday performance since April 2025, with major stock Saudi Aramco dropping by 1.1%. Outside the Gulf region, the Egyptian blue-chip index (EGX30) plummeted by 2.5%, nearing its lowest level in about seven months, with all constituent stocks declining. The Egyptian parliament is expected to vote on October 26 to decide whether to authorize the armed forces to provide support for Saudi Arabia in its conflict with the Houthi forces upon request.

  • SemiAnalysis CEO: Substrates are the 'Biggest Bottleneck'

    On October 25, the CEO of SemiAnalysis stated: 'I believe that in the semiconductor industry, the biggest limiting factor, aside from memory, is substrates. Substrates, PCB materials, and substrate materials are all severely under-invested. Many companies in the supply chain that produce these materials in Japan are relatively conservative and unwilling to make significant investments in capacity. As a result, there is a huge bottleneck. In terms of what can be produced in the next two years, whether it’s accelerators, CPUs, or any other component in the supply chain, I believe substrates are the biggest bottleneck.'

  • Keystone Hardware Wallet Website Hacked, Customer Information Leaked

    On October 25, Hong Kong-based self-custody hardware wallet brand Keystone, known for its full isolation and QR code signing, disclosed that its official website was unauthorizedly accessed on October 20, exposing customer names, contact information, shipping addresses, and order details (including purchased products and prices). The company confirmed on October 23, after verifying API activity with Shopify, that a third party obtained customer shipping information. Keystone emphasized that payment card and bank information, mnemonic phrases, private keys, and wallet passwords were not leaked. The company has blocked access, patched vulnerabilities, initiated an investigation, and notified affected customers via email, warning that scammers may impersonate Keystone to deceive customers under the pretext of refunds or device exchanges. Customers are advised not to click on suspicious links and not to disclose mnemonic phrases and private keys, with plans to release a detailed report within a few days. Other companies in the industry, such as Trezor (which experienced a leak from logistics provider ShipMonk in August) and Ledger (which had a security incident this month involving modified devices stealing mnemonic phrases), have also faced security issues.

  • Goldman Sachs Lowers 12-Month Target for South Korea's KOSPI Index by 25%

    On October 25, strategists at Goldman Sachs Group lowered their target for South Korea's KOSPI index by 25%. Previously, they had raised the target multiple times this year, but with increasing market concerns over AI-related trades, they have now opted for a downgrade. Led by analyst Timothy Moe, the team reduced the 12-month target for the KOSPI index from 12,000 points to 9,000 points. They noted that, given the benchmark index has fallen more than 35% from its peak in June, valuation assumptions need to become more cautious. These strategists believe that the current sell-off has left the South Korean stock market significantly undervalued; even after the target downgrade, the index still has over 60% upside potential.