French and Spanish authorities have apprehended the final suspect in the January 2025 kidnapping of Ledger co-founder David Balland, completely dismantling the criminal organization responsible. The arrest in Benalmádena, Spain, was executed under a European arrest warrant issued by France, concluding a weeks-long international manhunt.
The violent incident involved assailants severing one of Balland's fingers and demanding a ransom of 10 million euros (approximately $11.5 million) in Bitcoin. Balland was abducted from his home in central France on January 21, 2025, and was rescued by police the following night, with ten individuals arrested at the scene. The final suspect had fled to Spain, moving through Valencia, Seville, and Cádiz while using rented apartments and third-party bank cards to evade capture.
The investigation was a landmark example of cross-border police cooperation, involving a joint task force between the French National Police and Spain's Civil Guard. Authorities utilized digital forensics on cryptocurrency transactions, physical surveillance, financial tracking, and witness interviews. The case has sparked serious discussions about executive security in the crypto industry, leading to enhanced protection measures, security workshops, and improved coordination with law enforcement globally.
French courts have initiated extradition proceedings, and the suspect faces charges including kidnapping, assault, extortion, and participation in a criminal organization. This case is part of a broader wave of crypto-linked attacks in France throughout 2025, which included other kidnappings and attempted abductions targeting crypto executives and investors.