Musician Jonathan Meléndez and Family Murdered in Bitcoin Wallet Theft

Mexican musician Jonathan Meléndez and three members of his family were killed in an attack that authorities believe was motivated by an attempt to steal Bitcoin reportedly worth around $1.5 million. The incident is part of a laundry list of crypto wrench attacks in 2026, with experts predicting a surge amid recent data leaks of hardware wallet users.

Bitcoin fortune emerges as suspected motive

Meléndez, a keyboardist and founding member of Mexican indie rock band Camilo Séptimo, was killed on September 1 at his home in Atizapán de Zaragoza, near Mexico City.

According to an official statement, his pregnant wife, their three-year-old daughter, and a domestic worker also died in the attack. The family’s six-year-old son survived and was found unharmed by authorities, who moved him to the safety of relatives.

Mexican authorities confirmed the arrest of two suspects, identified as Diego Sebastian “N” and Gerardo “N,” following the killings. 

Investigators say the pair allegedly believed Meléndez and his family possessed a large amount of cryptocurrency and went to the apartment looking for what they described as a “cold wallet” containing millions of dollars in Bitcoin. Furthermore, investigators noted that one of the suspects induced the other with 2 million pesos as a reward for helping obtain the cryptocurrency.

The exact value of the alleged Bitcoin holdings remains unclear. Reports have cited around 30 million Mexican pesos, equivalent to $1.5 million, but authorities have not publicly confirmed that amount or established that the suspected wallet contained the sum.

Both suspects, a business associate and the family driver, face up to 70 years per victim. Prosecutors have brought charges including aggravated homicide involving multiple victims, interruption of pregnancy and cruelty toward an animal.

Crypto wrench attacks on the rise

The incident comes on the heels of physical crypto thefts surging in 2026. According to Chainalysis, losses from physical crypto thefts have topped $30 million, with CertiK recording 52 verified wrench attacks in the first half of the year.

Experts say attackers are relying on leaked customer databases, tax records, and on-chain activity to spot high-value cryptocurrency holders before staging attacks. The attacks come in the form of home invasions or kidnapping for ransom in digital assets, with France topping the charts for the most incidents recorded.

IMAGE 1

Source: Chainalysis

Last week, hardware wallet provider Trezor confirmed a data breach involving a shipping partner, leading to the bad actors accessing the personal data of over 60,000 of its customers. While the most obvious threat is increased phishing attempts, there are concerns that bad actors may use the leaked shipping addresses to stage crypto-wrench attacks.

Aware of the threat, Trezor is preparing to roll out an Anonymous Delivery Option for customers. The feature will allow for the purchase of hardware wallets while reducing the connection between an order and home addresses.