Jameson Lopp launches interactive dashboard mapping 360 physical Bitcoin attacks worldwide

Jameson Lopp, co-founder and Chief Security Officer of Casa, has released an interactive dashboard documenting 360 known physical attacks on Bitcoin and cryptocurrency holders around the world. The tool transforms years of quietly maintained GitHub data into a visual map of violence that the crypto industry has long preferred not to talk about.

The dashboard visualizes attack locations, timelines, severity ratings, and other attributes. It’s the kind of project nobody wants to need and everybody should probably bookmark.

The numbers paint an ugly picture

Lopp’s underlying dataset, a community-curated GitHub repository he has maintained since at least 2014, catalogs what the crypto community euphemistically calls “wrench attacks.” The name comes from the old xkcd comic about a $5 wrench being more effective than any cryptographic exploit.

In 2025, Lopp noted the frequency averaged more than one incident per week. The first 11 weeks of 2026 saw 23 documented incidents, maintaining that grim pace without any signs of slowing down.

A separate analysis by Haseeb Qureshi, drawing from the same underlying dataset, examined 269 of these incidents and found that more than half were rated as “Serious.” That classification typically involves armed robbery, kidnapping, or physical assault resulting in significant injury. A fatal attack in Mexico in September 2026 underscores that the upper end of the severity spectrum is not theoretical.

France has emerged as a particular hotspot, with multiple cases reported in recent years. The pattern there has become prominent enough to generate national media coverage and prompt local crypto communities to issue specific safety advisories.

Why a dashboard matters more than a spreadsheet

The visualizations allow users to filter by geography, time period, and attack severity. Someone considering attending a Bitcoin meetup in a specific city can now check whether that area has a documented history of targeting crypto holders.

The project is designed to be community-maintained, with Lopp encouraging contributions from anyone aware of incidents that haven’t been cataloged yet. This crowdsourced approach means the actual number of attacks is almost certainly higher than 360, since many victims never report incidents publicly, either out of embarrassment, fear of retaliation, or because they live in jurisdictions where law enforcement has little interest in crypto-related crime.

Lopp has been one of the more vocal figures in crypto security for years, and his role at Casa, which provides multi-signature custody solutions, gives him a professional stake in making people aware of physical risks. But the dashboard itself carries no commercial pitch. It’s a public resource built on open data.

The security market nobody wanted

The rise in documented physical attacks is creating demand for an entirely new category of services in the crypto ecosystem. Traditional cybersecurity focuses on protecting private keys from hackers. Wrench attacks bypass all of that by targeting the person holding the keys, not the keys themselves.

This has driven interest in custody solutions that make it genuinely impossible for a holder to access their full Bitcoin balance under duress. Multi-signature setups, time-locked transactions, and distributed key management all serve this purpose. Casa’s own product fits neatly into this category, as do various competing solutions.

For holders weighing their own security posture, the data suggests a few practical takeaways: minimize public association with significant crypto holdings, use custody solutions that prevent single-point-of-failure access, and pay attention to geographic risk patterns. The dashboard makes that last part considerably easier than scrolling through a GitHub repository at 2 a.m.