Binance has launched a new security feature called Withdraw Protection, designed to allow users to freeze outgoing transfers from their accounts for a period of one to seven days. This initiative directly addresses a global surge in violent physical attacks targeting cryptocurrency holders, known in the industry as wrench attacks. Data indicates that physical coercion incidents rose by 75% in 2025, prompting the exchange to implement this specific safeguard.
The feature operates as a user-activated lock that halts all on-chain withdrawals from a Binance account. The default lock duration is set to 48 hours, but users have the option to extend this period up to seven days depending on their risk assessment. During the lock period, account access and trading capabilities remain fully functional, ensuring that normal market activity is not disrupted.
Only outgoing crypto transfers are blocked during this window, providing a critical buffer against immediate asset draining. Users can opt for a stricter lockdown mode that removes the ability to cancel the freeze early once activated. Alternatively, standard settings allow users to pre-enable a bypass, enabling early release via security keys or confirmation through a separate phone number or email.
Why Is Physical Coercion Rising?
The introduction of Withdraw Protection comes in response to verified data showing a sharp increase in assault-related incidents against crypto holders. According to data from security firm CertiK, physical coercion incidents rose 75% in 2025, with assault-related incidents increasing by a staggering 250%.
France has emerged as a significant hotspot for these attacks, with authorities recording 47 such incidents in 2026 alone. High-profile cases, including the abduction of Ledger co-founder David Balland, have underscored the severity of the threat and the vulnerability of high-net-worth individuals in the crypto space.
These attacks represent a distinct threat model where digital credentials are bypassed by force. While digital defenses like phishing protection and two-factor authentication are robust, they are ineffective against in-person coercion where the legitimate user signs transactions under duress.
How Does The Lock Function?
Binance Chief Security Officer Jimmy Su clarified that Withdraw Protection is an internal policy lock rather than a cryptographic one. Consequently, it does not shield accounts from law enforcement orders, and users must trust Binance's infrastructure to enforce the freeze.
The feature aims to mitigate risks associated with in-person coercion by introducing a deliberate time delay. This delay disrupts the immediacy required by attackers, complicating their logistics and providing legitimate owners time to secure assets or contact authorities.
Su also highlighted the risk of trading bots with broad API permissions, advising users to protect API keys with the same rigor as passwords. The company is investing in context-aware authentication, which applies higher friction to high-risk actions like withdrawals while maintaining ease of use for routine trading.
What Are The Implications For Investors?
This move addresses a critical gap in crypto security by protecting users from physical coercion, a threat that traditional digital safeguards cannot prevent. By introducing a mandatory delay, the feature creates a safeguard that helps prevent immediate loss of funds during extreme situations.
The implementation allows users to select durations of one, three, or seven days, mirroring traditional banking security where banks place temporary holds on suspicious transactions. However, this approach shifts control to the user, adding a layer of user sovereignty to a centralized platform.
Industry experts praise this as a significant step toward consumer protection, potentially lowering insurance premiums by demonstrating proactive risk management. The feature is accessible via the mobile app and web platform under account security settings, aiming to provide a layer of protection for extreme situations where traditional security methods fail.