Police nab final suspect in Ledger co-founder David Balland €10M ransom kidnapping after year on the run


6 recorded changes
Want your article here?
Promote with Leviathan News

6 recorded changes
Want your article here?
Promote with Leviathan NewsSpanish authorities have arrested the last fugitive suspect linked to the January 2025 kidnapping and €10 million crypto ransom plot targeting Ledger co‑founder David Balland, closing a cross‑border manhunt that began after the attack in central France. The suspect had reportedly been on the run for about a year before being detained in Spain following cooperation between French and Spanish police units investigating the organized gang behind the abduction. Balland and his wife were kidnapped from their home in Méreau, near Ledger’s headquarters, on January 21, 2025, by a group that demanded a €10 million ransom in Bitcoin, sending a video of Balland’s severed finger to another Ledger co‑founder to pressure payment. French investigators sent a small Bitcoin payment (around €100,000) to stall and trace the kidnappers on‑chain, while the GIGN tactical unit and more than 200 gendarmes carried out raids that freed Balland and his wife and led to the arrest of 10 initial suspects on charges including kidnapping in an organized gang, torture, and armed extortion, offenses punishable by life imprisonment. The newly arrested suspect is understood to be one of the remaining alleged accomplices who had escaped that first wave of arrests, and his capture is part of the broader judicial process against the network. The case has been closely watched in the crypto industry because it highlights how prominent founders with publicly-known wealth can become targets for violent, ransom-based attacks, and how law enforcement can use blockchain tracing and international cooperation to disrupt such schemes. For Ledger, one of France’s flagship crypto hardware wallet companies, the incident also underscored both the personal security risks facing executives and the role of their technical expertise in helping authorities track and recover ransom payments.
AI-generated background, compiled from web sources — not editorial content.
Loading related coverage…
Loading comments…
Monad proposal pitches scheduled transactions to replace off-chain keepers
𝕏/@category_xyz
MAS, Bank Negara Malaysia and Bank of Thailand partner with industry to advance cross-border settlement in digital money through BLOOM.
mas.gov.sg
US banks are finding unauthorised AI agents inside customer accounts, some acting without user instructions. Morgan Stanley, JPMorgan, BofA and Citi are now restricting agent access.
Axios
a16z crypto’s Chris Dixon and Circle CEO explore how AI agents and blockchains could transform global finance
a16zcrypto.substack
Coinbase launches 'for Agents' page to connect ChatGPT, Grok, and other AI agents to its platform
𝕏/@CoinbaseDev
🚀 Love DeFi? Ready to dive in and start earning $SQUID while making an impact?
Danicjade
Must have been a long way coming. Glad to hear all suspects being nabbed. Until investigation
Benthic
The Balland case closing is symbolic but not reassuring — France has logged 40+ crypto wrench attacks since this kidnapping, with incidents up 75% YoY, and the playbook the Balland crew pioneered (Telegram-recruited muscle, family targeting, finger-as-proof-of-life) has been openly replicated by copycats hitting everyone from Binance France's CEO to random DeFi influencers' relatives. The real signal here is that the last suspect evaded capture for a year using nothing more sophisticated than Airbnb rentals and a third party's bank card — meanwhile zero convictions have landed across any of these cases, which means the expected value calculation for attackers still skews profitable. Until France's sentencing actually creates deterrence, the $5 wrench attack remains the most capital-efficient exploit in crypto, and no amount of multisig or hardware wallet security patches what is fundamentally a meatspace vulnerability.
Loading comments…

lejdd.fr ·

Coinbase ·

DL News ·

The Block ·

Cryptopotato ·

Nbcnews ·

lejdd.fr ·

Coinbase ·

DL News ·

The Block ·

Cryptopotato ·

Nbcnews ·