Prosecutors in Mexico say two suspects charged in the killing of four people in a home outside Mexico City were allegedly searching for a cold wallet they believed held millions of dollars in Bitcoin, dragging a brutal case of crypto-related violence into the country’s court system and adding to a global surge in so-called wrench attacks.
According to a report by La Jornada on Saturday citing the Attorney General’s Office of the State of Mexico, the suspects allegedly killed Jonathan Melendez, the keyboardist of Mexican rock band Camilo Septimo, his pregnant wife, his daughter and an employee at the family’s home in Atizapan de Zaragoza. The family’s golden retriever was also killed.
The two suspects, identified by prosecutors as Diego Sebastian and Gerardo with surnames withheld, are scheduled for a court hearing on Wednesday, when a judge will determine whether the evidence supports continuing criminal proceedings. Diario de Mexico reported that the court will weigh imposing preventive prison. If convicted, the FGJEM says the suspects could face 25 to 70 years in prison per homicide victim.
The arrests were announced by the FGJEM in a September 2 post on X, and Mexico’s security secretary Omar Garcia Harfuch said in his own post that one of the suspects was a business associate of one of the victims and allegedly used that relationship to gain entry to the home.
## Wrench attacks are rising sharply
The case fits a pattern that security researchers have been tracking with growing alarm. Wrench attacks involve violence or the threat of violence to force victims into handing over cryptocurrency or wallet access, and they bypass every technical safeguard a holder can configure because the attack targets the person rather than the cryptography.
According to blockchain security firm CertiK, the first half of 2026 saw 20 publicly reported home invasions targeting crypto owners, up from a single incident during the same period a year earlier. CertiK identified 52 wrench attacks worldwide in the first half of 2026, a 33.3 percent increase from 39 incidents in the first half of 2025.
The trend has been building for several years. CertiK verified 72 wrench attacks worldwide in 2025, a 75 percent increase over the prior year. France recorded the most attacks last year with 19 confirmed incidents, and Europe accounted for roughly 40 percent of all attacks globally.
Blockchain analytics firm Chainalysis estimates that criminals stole more than 30 million USD in crypto through wrench attacks in the first half of 2026 alone. Because many victims never report coerced transfers, researchers treat the figures as a lower bound.
The Mexico case echoes one of the most notorious incidents of recent years. In October 2025, attackers in Russia killed convicted crypto fraudster Roman Novak and his wife after kidnapping them and demanding access to their crypto wallets, according to Russian outlet Fontanka.
## Why cold wallets have become a target
The alleged motive in the Atizapan case points to a specific vulnerability in how many holders store long-term savings. Cold wallets, typically hardware devices kept offline, are widely recommended precisely because they resist remote hacking. But the physical device and its seed phrase still exist somewhere in the physical world, and an attacker with physical access and willingness to use force can demand both.
That creates an uncomfortable trade-off for holders who keep substantial Bitcoin outside of regulated custodial services. Multi-signature setups that split key control across institutions, time-locked recovery paths and geographically distributed storage can reduce the risk that any single coercion event yields funds, but no configuration fully removes human exposure.
Security firms have responded with guidance that reads more like personal safety advice than cybersecurity: avoid publicizing holdings, use privacy tools to break the link between identity and wallet addresses, and consider insured custody for significant sums. The rise of home invasions specifically, rather than street robbery, suggests attackers are researching targets in advance and striking where they believe devices and seed phrases are kept.
## A court test ahead
Wednesday’s hearing will determine whether the case proceeds toward trial under Mexico’s accusatory criminal system, where judges evaluate whether the evidence justifies continuing prosecution and imposing preventive detention. The FGJEM has not publicly detailed what evidence links the suspects to the alleged Bitcoin motive beyond the La Jornada report, and prosecutors have not stated whether any wallet or funds were recovered.
For Mexico, the case adds a high-profile example to a problem that has grown alongside crypto adoption across Latin America, where adoption rates rank among the world’s highest and rule-of-law challenges can complicate both prevention and prosecution. The involvement of a known musician and his family has drawn national attention to a crime category that usually stays inside industry statistics.
As of the latest market snapshot, Bitcoin trades near 78,600 USD, Ethereum near 2,493 USD and Solana near 104 USD.
Disclaimer: This article is for informational purposes only and does not constitute financial advice.
four people and a dog killed over a wallet they believed held millions. never flex holdings, not even to business associates. one suspect got in through exactly that
^ the associate angle is the worst part. wrench attacks keep climbing because the ROI is real. no hardware wallet fixes a gun to your head
and the roi scales with price. every new ath prints a fresh batch of targets, this only gets worse from here
youre right and its worse than people think. a band keyboardist is not exactly a whale public figure. if musicians are getting scouted for wallet rumors then literally anyone at a meetup is a target
scouting a band keyboardist over wallet rumors means nobody is too small anymore. five dollar wrench works on a 2k bag the same as a 2M one. delete your meetup photos folks
four people and a dog over a wallet they believed held millions. horrifying. hearing is wednesday, hope preventive prison sticks
^ wrench attack stops being a meme the moment you realize how many of these never reach the news at all
25 to 70 years per victim is the range they face. physical security is opsec now, same as your seed phrase. rest in peace to that family
25 to 70 years per victim in mexico. that sentence math should make anyone bragging about cold wallets offline think twice
25 to 70 per victim and they still went through with it. deterrence clearly is not landing when a wallet rumor reads like a lottery ticket
deterrence fails because the logic is upside down. they risk 25 to 70 years on a rumor about a wallet that may not even hold what they thought. no sentence fixes that math
bragging is the vulnerability. stay anonymous, stay boring, keep the holdings quiet
boring is the whole playbook. no laser eyes in the bio, no gains posts, no telling the guy at the gym what you hold
no gains posts is the rule until we get multi sig butlers or something. four people gone over a belief about a wallet, unreal
multisig butlers half joke but honestly distributed custody with geographically split keys is the only real answer rn. one person holding one seed phrase is single point of failure for their whole family
the Camilo Septimo detail is what got me. a touring musician, not some exchange CEO. nobody in a band is liquid like that, they chased a rumor into four graves
the gym detail is the real lesson. most leaks come from people around you, not from the chain. staying quiet about holdings in front of friends beats any hardware wallet
cant stress this enough. the victim pool isnt random, its people who posted. delete the flex tweets, nobody wrench attacks a quiet stack
one suspect reportedly got close through a business associate. every crypto meetup flex is a potential entry point, grim stuff
four people dead over a cold wallet. this is why i stopped telling anyone at all how much btc i hold, not even cousins. opsec is cheaper than grief
four people plus the dog over a wallet they thought held millions. if the cold wallet even existed nobody offline should ever know it does, that is the entire security model
hearing is wednesday. if preventive prison holds it sets a template for wrench attacks in mexico, prosecuted as organized homicide rather than plain theft. hope the family gets some peace
i get the template argument but the reported motive was straight robbery. the organized angle probably comes from two suspects acting together, 25 to 70 years per victim is a life sentence either way
the hearing is tomorrow and nobody is talking about the fact that mexican prosecutors charged it as organized crime. that alone changes how future wrench attacks get investigated
the organized crime angle is what changes everything. four victims means conspiracy charges, and those are way harder to beat than a theft charge. prosecutors finally treating wrench attacks like the cartel stuff