Authorities in Mexico have arrested two suspects accused of killing four people in a home invasion they allegedly carried out in search of a Bitcoin “cold wallet” believed to contain millions of dollars, according to La Jornada and an update from the Attorney General’s Office of the State of Mexico (FGJEM).

The alleged incident centers on Jonathan Meléndez, a keyboardist for the rock band Camilo Séptimo, along with his pregnant wife, their daughter, and a household employee in Atizapán de Zaragoza. Mexico’s FGJEM said the suspects may face lengthy prison terms if convicted, while investigators reportedly claim one suspect gained access to the residence through a personal connection.

Key takeaways

Mexican prosecutors accuse two men of targeting a Bitcoin cold wallet during a multi-victim homicide in Atizapán de Zaragoza, La Jornada reported.
Both suspects are scheduled for a hearing on Wednesday, where a judge will decide whether the evidence is sufficient to move forward with criminal proceedings.
FGJEM said the suspects could face 25 to 70 years in prison per homicide victim if convicted, as reported by La Jornada.
Officials reportedly alleged at least one suspect had a business relationship with one of the victims and used it to enter the home.
Broader security reporting continues to show wrench-style attacks—coercing victims to access or hand over crypto—rising across 2026’s first half.

Arrests tied to alleged hunt for a Bitcoin cold wallet

La Jornada, citing an update from FGJEM, said two suspects—identified only as Diego Sebastián and Gerardo, with their surnames withheld—were arrested in connection with the killing of four people.

The case is now moving toward a judicial stage: Diario de México reported that the suspects are scheduled for a court hearing on Wednesday, during which a judge will determine whether there is enough evidence to sustain ongoing criminal proceedings.

FGJEM announced the arrests in an X post on Sept. 2. La Jornada also reported that prosecutors believe the men pursued a cold wallet they thought held millions of dollars in Bitcoin. Mexico’s security secretary, Omar García Harfuch, said in a Sept. 2 X post that one suspect used a relationship with a victim to get into the home.

Allegations around the victims and the alleged method of entry

According to La Jornada, prosecutors accuse the two suspects of killing Jonathan Meléndez, his pregnant wife, his daughter, and an employee during the attack at their residence in Atizapán de Zaragoza. The report also says the family’s golden retriever was killed.

The allegation about access is important for how the case could be framed in court. García Harfuch stated that one suspect was a business associate of one of the victims and allegedly leveraged that connection to enter the home, a claim that can matter for establishing planning, intent, and the suspects’ ability to reach the target location.

Potential sentences and what the next court step determines

La Jornada reported that FGJEM said the suspects could face 25 to 70 years in prison per homicide victim if convicted. While the precise charges and ultimate sentencing outcomes would depend on the court’s determination, the range underscores the gravity of the alleged crimes and the prosecution’s posture.

For investors and crypto users, this case also illustrates how physical coercion can become intertwined with cryptocurrency ownership. Unlike typical theft cases, wrench attacks depend on immediate access—often through forcing victims to unlock wallets, reveal credentials, or hand over control.

Why “wrench attacks” remain a growing crypto risk

The Mexico case aligns with broader security reporting on coercive “wrench attacks,” where criminals use violence or threats to compel victims to hand over cryptocurrency or provide access to wallets.

Blockchain security firm CertiK reported that in the first half of 2026 there were 20 publicly reported home invasions targeting crypto holders, compared with just a single incident in the same period a year earlier. CertiK also put the total number of wrench attacks worldwide at 52 in H1 2026, up 33.3% from 39 during H1 2025.

Chainalysis estimates that criminals stole more than $30 million in crypto through wrench attacks in the first half of 2026.

The overall increase is not limited to 2026. CertiK previously reported that wrench attacks rose in 2025, with 72 verified cases worldwide—up from 39 in the prior year, described as a 75% increase in earlier reporting. The same security reporting noted that France recorded the most attacks in 2025 with 19 confirmed incidents, and that Europe accounted for about 40% of attacks globally that year.

Separate reporting also highlighted the lethal stakes of such crimes: Russian outlet Fontanka reported that in October 2025 attackers killed convicted Russian crypto fraudster Roman Novak and his wife after kidnapping them and demanding access to crypto wallets.

What to watch as the Mexico case moves forward

With a Wednesday hearing scheduled to assess whether the evidence supports continued prosecution, the key developments to monitor are what prosecutors can substantiate about the alleged cold-wallet target and the suspects’ entry into the home—particularly the claimed relationship used to gain access. Separately, the rising global pattern of wrench attacks in 2025 and the first half of 2026 suggests crypto holders should keep security planning focused on physical coercion risks, not only on digital threats.