A suspect in the kidnapping of David Balland, co-founder of Ledger, has just been arrested in Spain. The situation has quite interesting cross-border dimensions: he was detained in Benalmádena following a European arrest warrant from France. Balland was kidnapped from his home last January, held hostage demanding 10 million euros, and was released by police operations the next day.

What I find relevant here is how this reflects an increasingly visible pattern. It’s not an isolated case. In June of last year, France arrested 25 suspects in a wave of kidnappings targeting crypto executives and investors. There are other cases: attempts against the family of Pierre Noizat, former CEO of Paymium, and other incidents where attackers sought access to hardware wallets.

Authorities tracked the suspect through Valencia, Seville, and Cádiz. The group had been quite careful: renting apartments online, using third-party bank cards to hide their trail. But cooperation between French and Spanish investigators ultimately located him.

This is important for the crypto industry because it exposes something that goes beyond digital risks. The crypto ecosystem has grown, generated wealth concentrated in individuals and companies, and this has attracted violent criminals. It’s not just phishing or hacks; it’s kidnapping, extortion, physical violence.

The implications are clear: prominent figures in crypto need serious security measures. Startups and investors must rethink contingency protocols, security training, incident response. And at the institutional level, cross-border cooperation among European authorities seems to be working in these cases.

The arrest in Benalmádena is a point in a broader investigation. Observers will be watching how France and Spain continue dismantling this network, and what connections emerge. For the crypto sector, it’s a reminder that physical security is as critical as cybersecurity.