CustodyStress
Archive › Physical coercion
Part of the CustodyStress archive of observed Bitcoin custody incidents
CS-01311

Physical coercion — hardware wallet (2025)

Constrained
Case description
In the aftermath of the January 2025 Ledger co-founder kidnapping, French authorities arrested 10 people aged 20–40, most of whom had prior criminal records. The ransom payment had been partially made in cryptocurrency before GIGN intervention, and investigators subsequently worked with Tether and exchanges to freeze approximately 95% of the funds transferred. The case drew attention to the systemic vulnerability of publicly identified cryptocurrency executives and their families. Security researchers noted that the WhatsApp number used by kidnappers was registered via a Southeast Asian phone number and a VPN, demonstrating the operational security sophistication of the group. French Interior Minister Bruno Retailleau subsequently announced meetings with the cryptocurrency industry to address rising crypto-related violent crime.
Custody context
Stress conditionPhysical coercion
Custody systemHardware wallet (single key)
OutcomeConstrained
DocumentationUnknown
Year observed2025
CountryFrance
Structural dependencies observed
Biometric or physical presence
What this illustrates
Access required in-person verification that couldn't be arranged under the circumstances. Whether full access was ultimately possible is unclear, but significant delay or outside intervention was involved.
Outcome interpretation
Access remained possible, but only with delay, dependence, or significant difficulty.
Source
Publicly Reported
Evidence type
News article
Related cases involving physical coercion
105 cases involve physical coercion 274 cases involve hardware wallet (single key) View archive statistics →
This archive documents observed custody survivability failures. It does not attempt to document all Bitcoin losses or security incidents. Submit a case
← All cases
Framework references
Terms guide
Survives
Access remained possible under the reported conditions.
Constrained
Access remained possible, but only with delay, dependence, or significant difficulty.
Blocked
Access was not possible under the reported conditions.
Indeterminate
There was not enough information to determine the outcome.
Single-person knowledge
Recovery depended on information or capability held by one individual who was unavailable.
Institutional dependence
Recovery depended on a third-party institution or service that was inaccessible or uncooperative.
Documentation gap
Recovery depended on instructions that were missing, incomplete, or unclear.
Authority mismatch
The person with legal authority to act did not have operational access, or vice versa.
Original text
Rate this translation
Your feedback will be used to help improve Google Translate