CoinRabbit and ChangeNOW published a joint report Wednesday titled 'Financial Privacy in the Digital Age,' making the case that privacy on public ledgers is a protective tool — not a loophole for criminals. The report cites 52 verified 'wrench' attacks in the first half of 2026, with over $124 million stolen. It also argues that corporate data leaks and the myth of compliance-friendly surveillance are pushing the industry toward better privacy defaults.
The human cost of public ledgers
The report's most jarring number: 52 physical attacks — so-called wrench attacks where victims are forced to hand over crypto keys — in just six months. That's more than one a week. The total stolen, $124 million, is a conservative estimate since many attacks go unreported. On the corporate side, data breaches now average $4.44 million per incident, and 36% of board members rank financial leaks as a primary operational concern. The report argues that public ledgers expose both individuals and companies to targeted violence and corporate espionage.
The compliance myth
Illicit crypto flows hit an estimated $158 billion in 2025, with 84% moving via stablecoins. But the report notes that law enforcement doesn't actually rely on raw blockchain monitoring to track that activity. Instead, they use regulated infrastructure — exchange KYC, fiat on-ramps, stablecoin freezes. That undercuts the argument that privacy tools are a gift to criminals. The report calls the compliance-vs-privacy framing a false choice, pointing out that most illicit flows already happen on transparent chains.
How CoinRabbit and ChangeNOW approach privacy
CoinRabbit uses dynamic address generation and internal asset management to break the end-to-end transaction chain on public ledgers. ChangeNOW's framework separates sender from receiver without mixing pools, while keeping compliance records at regulatory touchpoints. Both companies say their methods preserve privacy without sacrificing the ability to respond to lawful requests. CoinRabbit also notes it has maintained a 100% capital reserve model since 2020, ensuring client assets are fully backed.
The report lands at a time when regulators are tightening stablecoin rules and exchanges face pressure to block suspicious wallets. Whether those same regulators will accept privacy-first designs as compliant remains an open question — one the report tries to answer with data rather than rhetoric.
