A fatal wrench attack in Mexico: Jonathan Meléndez murdered for a Bitcoin wallet

A fatal confidence. On the evening of September 1, 2026, armed men shot Jonathan Meléndez at his home in Atizapán de Zaragoza. The musician, who lived on the outskirts of Mexico City, is keyboardist for the Mexican rock group Camilo Séptimo. His wife Ana Paula, four months pregnant, as well as their 3-year-old daughter and their domestic worker, also died with him. Ultimately, only their 6-year-old son survives. Concretely, Mexican justice is holding a motive: a Bitcoin wallet hidden in the apartment. Besides, we already told this story a few months ago. Indeed, a Mexican YouTuber was sentenced to 50 years in prison for a poorly negotiated bitcoin ransom. Except that in Atizapán, no one survived to negotiate anything.

Diego Sebastián Rosen Ferlini, the associate who knew where to strike

As a result, the police arrested two men in less than 24 hours. Diego Sebastián Rosen Ferlini is 51 years old. He is an Argentinian businessman, associate of Jonathan Meléndez in a vacation rental business. Thus, this proximity would have served as a master key. However, an arrest warrant for fraud was already pending against him fifteen days before the crime. An amparo (Mexican judicial reprieve), obtained on August 17, however suspended it.

First, his accomplice is called Gerardo Cisneros Bejarano, 52 years old: Rosen Ferlini’s personal driver. In exchange, he reportedly accepted around 2 million pesos, or $120,000, for his logistical role. Once arrested, Rosen Ferlini allegedly offered a bribe. Bringing the equivalent of 1.5 million pesos in bitcoins from Spain, where his wife lives. For the moment, justice is prosecuting the two men for corruption and resistance; the homicide charge remains in the process of being filed. In total, the Fiscalía cites a cumulative sentence of up to 296 years in prison. Finally, it covers qualified homicide, animal abuse and termination of pregnancy.

France, the new Eldorado of wrench attacks

This crime has a name in crypto jargon: wrench attack. Concretely, this is physical extortion aimed at spitting out a password rather than breaking through an algorithm. According to a Chainalysis report relayed by The Block in early August, attacks exploded in the first half of 2026. In total, attackers have already stolen more than $30 million during physical attacks on cryptocurrency holders. Last year, over twelve full months, the total bill amounted to 58 million.

Overall, the success rate of these attacks declines, from 67% in 2024 to 26% this year. As a result, France is climbing in the wrong direction in the ranking. Furthermore, there were 30 cases in mid-2026, compared to 19 over the entire previous year. Chainalysis links part of this jump to a data leak from the French tax authorities in 2024. In short, this leak would have exposed the identity and assets of wealthy holders.