Most crypto security discussions focus on the usual suspects like phishing attempts, malware infections, and social engineering scams. But there's another security dimension that doesn't get nearly enough attention, and we believe it's worth taking seriously. Physical attacks against cryptocurrency holders happen more often than you might think, and at Gart Research, we've built something we hope will help you avoid becoming a statistic yourself.
What we've built and why
We maintain a publicly accessible database that tracks and analyzes real-world physical attacks against cryptocurrency holders. Our work builds on the foundational research of Jameson Lopp, a respected Bitcoin security expert who has been meticulously documenting physical Bitcoin attacks for years. We've taken this essential work further by expanding the dataset and organizing cases into clear, actionable categories that we hope make the information more useful for the community.
We want to be upfront about our methodology and limitations. We openly acknowledge that our database is a work in progress, since many incidents go unreported or lack sufficient detail for complete analysis.
Understanding the threat landscape
One of our main goals has been creating a detailed categorization system that helps people understand how these attacks actually unfold. When you can recognize patterns and warning signs, you gain the knowledge to avoid similar situations. We've structured our categories to be practical rather than rigid, since we've observed that real-world attacks often blend multiple tactics.
Some attacks we've documented involve kidnapping, where victims are taken to unknown locations, while home invasions keep victims hostage in their own spaces. What we've found particularly concerning is how sophisticated certain attacks can be. Social engineering attacks rely on building trust first. Attackers use charm, shared interests, and carefully crafted scenarios to make victims comfortable before revealing their true intentions.
The P2P trade scenario represents a specific vulnerability we've seen repeatedly in the crypto ecosystem. These face-to-face exchanges for buying or selling cryptocurrency create natural opportunities for criminals to stage ambushes. Armed robberies we've documented typically target semi-public locations like offices, shops with Bitcoin ATMs, or mining facilities, and they usually aim for quick scores rather than extended captivity situations.
Authority misuse attacks exploit people’s natural instinct to trust law enforcement and government officials. We've documented cases where criminals either abused legitimate positions of power or impersonated police, military, postmen or other official figures to gain access or cooperation. Express kidnappings operate on a shorter timeline, focusing on forcing quick ATM withdrawals or mobile exchange transfers rather than long-term captivity demands.
The Costly fame category captures an important lesson about discretion that we've observed across many cases. These incidents involve victims who were targeted specifically because they had visible public profiles in the crypto space. Often these individuals had shared too much about their holdings, lifestyle, or personal routines on social media or in interviews. Muggings represent more opportunistic street-level attacks where criminals rob victims of physical valuables including crypto assets. Swatting, while less common in our data, represents a dangerous form of harassment where false emergency reports trigger armed police responses against victims.
Here's what encourages us in this work – all the cases that did not happen. As a partial success, we've also documented dodged attacks, cases where intended victims did not successfully avoid to be targeted but managed to mitigate attacks through smart responses, good instincts, or sometimes just fortunate timing or luck. We find these stories just as valuable for learning purposes as the completed attacks.
Knowledge makes you safer
Here's the reality we've come to understand through our research: Bitcoin's pseudonymity protects your transaction privacy, but it does absolutely nothing to protect you physically once someone connects your real-world identity to your crypto wallets. In fact, the irreversible nature of cryptocurrency transactions makes crypto holders an especially attractive target compared to someone with only traditional bank assets.
We see our database serving three critical functions that directly benefit you:
First, it raises awareness about threats that exist beyond the digital realm. You can have the best hardware wallet and the strongest passwords in the world, but that won't help if someone knows who you are and decides physical coercion is their attack vector of choice.
Second, and perhaps most importantly from our perspective, the documented cases give you the opportunity to learn from other people's painful experiences without having to go through them yourself. Each case in our database represents a lesson about what situations to avoid, what warning signs to watch for, and what behaviors make you a target. We've worked hard to gather and organize this knowledge because we believe it becomes your roadmap for staying safe.
Third, the empirical data on attack patterns we've collected helps the entire community develop more sophisticated security strategies. When you can see how attacks actually unfold in the real world rather than just theoretical scenarios, you can build much more effective defenses. We've spent considerable time analyzing these patterns so you don't have to start from scratch.
What this means for your security
We think every cryptocurrency holder should take a few minutes to understand what our research reveals. Our database makes clear that operational security extends far beyond technical measures. Being your own bank means thinking about security holistically, and we've seen too many cases where people with excellent technical security practices became victims because they overlooked physical security considerations.
Discretion matters enormously, as we've learned from analyzing countless cases. The less people know about your crypto holdings, the better. This applies to casual conversations, social media posts, and even how you conduct face-to-face transactions. When meeting someone for a P2P trade, we recommend treating it with the same caution you'd apply to carrying large amounts of cash, because that's essentially what you're doing.
Protecting the connection between your identity and your holdings should be a priority based on what we've observed. This means being thoughtful about what personal information you share in crypto-related contexts and how you conduct transactions that might reveal your holdings to strangers. We've documented too many cases where attackers pieced together information from multiple sources to identify and target victims.
The growth of Bitcoin adoption makes this knowledge increasingly relevant, in our view. Higher prices and broader ownership mean more people are holding significant value in cryptocurrency, which naturally attracts more attention from criminals. Our documentation proves this isn't a theoretical concern, but a documented reality that all crypto-holders would be wise to prepare for.
What we hope you take away
The fundamental principle we want to emphasize is straightforward: Taking responsibility for being your own bank includes taking responsibility for your physical security. We've made Gart Stats freely available because we want to make this task more manageable by showing you what real threats look like, how they unfold, and most importantly, how you can avoid finding yourself in similar situations.
We welcome your feedback, corrections, and contributions to help make this resource even more valuable for the community. You can reach us through our contact page if you have information about cases we should include or corrections to existing entries. Together, we can build a more comprehensive understanding of these threats and help more people stay safe.
Note: If you face concrete security threats, please contact the appropriate authorities. If you want to improve your security, get a consultation with our security experts.