Savannah Guthrie’s Mother’s Disappearance and Its Possible Link to ‘Wrench Attacks’

The Case of Nancy Guthrie’s Disappearance

Nancy Guthrie, aged 84, went missing from her home near Tucson, Arizona, in the early hours of February 1. Former FBI agent Jennifer Coffindaffer suggests that her disappearance might be tied to a violent form of cryptocurrency-related crime known as a ‘wrench attack.’

Pima County Sheriff Chris Nanos stated that authorities believe Guthrie was taken against her will. However, no suspect has been publicly identified, and no arrests have been made. Sheriff Nanos indicated that investigators know the motive but have chosen not to disclose further details.

Link to a Nearby Home Invasion

Agent Coffindaffer has proposed a possible connection between Guthrie’s disappearance and an alleged home invasion in Scottsdale, Arizona, which occurred the day before Guthrie went missing. This invasion was reportedly part of a scheme to steal millions in cryptocurrency.

‘I have been speaking about a wrench attack that took place literally about 90 minutes North of Nancy’s house the day before Nancy was attacked since early March,’ Coffindaffer wrote in a post.

Coffindaffer explained that victims of wrench attacks are usually individuals with cryptocurrency wealth or those related to such individuals. She believes this type of attack could be linked to Guthrie’s disappearance.

Understanding ‘Wrench Attacks’

‘Wrench attacks’ refer to incidents where physical force or intimidation compels victims to surrender their cryptocurrency access. These attacks are named after the hypothetical use of a wrench to coerce someone into revealing their crypto keys.

According to TRM Labs, there has been a global rise in such attacks. CertiK, a crypto-security firm, documented 34 verified incidents in the first four months of 2026, marking a 41% increase compared to the previous year. Estimated losses amounted to approximately $101 million.

The firm predicts a record high with about 130 incidents by the end of the year, potentially leading to several hundred million dollars in losses.

Recent Incidents of ‘Wrench Attacks’

In the U.S., two crypto investors were charged with the kidnapping and torture of a man for his Bitcoin password. Meanwhile, France has witnessed several ransom plots involving the kidnapping of wealthy cryptocurrency holders and their relatives.

One high-profile case involved David Balland, co-founder of French crypto-wallet firm Ledger, and his wife. They were kidnapped, and the perpetrators demanded a €10 million ransom, even severing one of Balland’s fingers. The couple was eventually rescued, and several suspects were arrested.

Reasons for the Increase in ‘Wrench Attacks’

TRM Labs attributes the rise in these attacks to several factors. Perpetrators wrongly assume cryptocurrency theft is less detectable due to the difficulty in tracing transactions. Individuals showcasing their cryptocurrency wealth online are viewed as attractive targets.

Moreover, with personal information easily accessible online, attackers find it simpler to identify and track potential victims.

Search and Investigation Continues

Nancy Guthrie was last seen at her home in the Catalina Foothills neighborhood of Tucson on January 31. Her disappearance sparked a major search effort involving local law enforcement and the FBI. Blood droplets were found on her porch, adding urgency to the investigation.

In February, the FBI released doorbell camera footage showing a masked man, who remains a suspect, outside Guthrie’s home on her disappearance night. Despite ongoing investigations, there are no significant breakthroughs or suspect identities disclosed.

Encouragement for Public Assistance

The investigation is still active. Authorities urge anyone with information to contact 1-800-CALL-FBI (1-800-225-5324), 520-351-4900, or 88-CRIME. Tips can also be submitted online at tips.fbi.gov.