Chinese real estate executive Yang Weixin, 53, was abducted from his Phnom Penh apartment on the evening of May 29 and killed roughly 14 hours later after kidnappers failed to collect a $2 million crypto ransom. Cambodian police said the case is a premeditated kidnapping for ransom that ended in murder. The three suspects remain at large, and no public on-chain trace of the ransom wallet has surfaced.
How the kidnapping unfolded
Security footage shows three men forcing Yang into a vehicle around 8 p.m. on May 29. At about 3 a.m. the next morning, the kidnappers used Yang’s phone to demand a $2 million crypto ransom. His wife told police she couldn’t raise the funds. A final message arrived shortly before 9 a.m. Then the captors went silent.
A truck driver later discovered Yang’s bloodstained Toyota Prius in Ba Ko village, Dangkao district. Inside, police found cable ties used to bind the victim. Investigators are now looking into a possible link to a 2014 business dispute between Yang and another Chinese national.
Rise of ‘wrench attacks’ in 2026
The killing fits a worrying trend. Security firm CertiK tracked 34 verified physical coercion incidents—colloquially called “wrench attacks”—in the first four months of 2026. That’s a 41% year-over-year increase. Researchers expect further escalation this year as social-media profiling helps criminals identify people who visibly hold crypto.
Other recent cases include the kidnapping of Russian entrepreneurs in Buenos Aires and a Hong Kong trader who was tortured and forced to hand over exchange credentials.
Cambodia’s role in crypto-linked crime
Cambodia has become a hub for crypto-linked organized crime. The Huione Group network and compounds tied to Prince Holding have drawn U.S. sanctions in recent months. The country’s lax enforcement and deep ties between business and crime make it a magnet for kidnapping crews targeting wealthy Chinese nationals.
The three suspects in Yang’s abduction have not been identified publicly. Police have released no images or descriptions. Without a public on-chain trace of the ransom wallet, the trail is cold for now.
