Binance adds user‑controlled withdrawal lock to curb crypto wrench

Binance announced a new security tool called Withdraw Protection that lets account holders temporarily block all on‑chain withdrawals for a period of one to seven days [1]. The feature is designed to protect users from “wrench attacks” – physical assaults that force victims to hand over crypto assets – and is implemented as an internal policy rather than a cryptographic lock [1][3].

Key takeaways

• Users can set a withdrawal freeze of 1‑7 days, and the lock cannot be lifted early by customer service [1].
• The mechanism is a policy‑level block, not a blockchain‑level cryptographic lock, and does not impede law‑enforcement actions [1].
• Binance introduced the tool on May 4, citing rising incidents of offline coercion, especially in regions where crypto ownership is risky [1][3].
• CertiK reports a 75 % rise in physical threats to crypto holders in 2025 and a 41 % increase in wrench attacks in the first four months of 2026 [1][2].
• The feature also warns users to treat API keys like passwords to avoid bot‑driven unauthorized withdrawals [1].

Binance’s response to rising offline coercion

Binance’s Chief Security Officer Jimmy Su explained that the withdrawal lock was built after the exchange observed patterns suggesting users were being forced to move funds under duress [1]. The tool gives users a “time‑lock” that can buy them crucial minutes or days to seek help, especially when traveling to high‑risk jurisdictions where crypto ownership can attract physical danger [1]. Su emphasized that the lock is enforced by internal policy; even Binance support staff cannot override it during the set window, though law‑enforcement orders remain unaffected [1].

The launch follows a sharp uptick in reported wrench attacks. CertiK’s February 2026 report noted a 75 % increase in verified physical‑threat incidents in 2025, with 72 cases recorded and assault‑related events up 250 % [1]. In early 2026, the firm documented 34 attacks worldwide—a 41 % rise over the same period in 2025—most of which occurred in Europe, particularly France [2]. High‑profile cases such as the kidnapping of Ledger co‑founder David Balland and a family extortion in France illustrate the growing threat landscape [1].

Why it matters

The withdrawal lock reflects a broader shift in crypto security: as on‑chain protections improve, attackers are turning to physical coercion—the weakest link in the security chain [2]. By giving users a simple, self‑administered freeze, Binance aims to reduce the success rate of these offline attacks and encourage better overall hygiene, such as robust API‑key management [1][3]. While the tool does not stop law‑enforcement actions, it adds a layer of defense for users who might otherwise be compelled to surrender assets under threat. Continued monitoring of attack trends and user adoption of the lock will determine its effectiveness in curbing the rising tide of wrench attacks.