Evan Luthra Recounts Oxford Kidnapping and $2M Crypto Theft
Crypto investor Evan Luthra says five masked men assaulted him in Oxford, England, on November 4, 2025, and drained more than $2 million in crypto from exchange accounts within about 30 minutes. Thames Valley Police opened an investigation, and about $1 million has reportedly been recovered, with one suspect's trial now set for November 2027.
Written by CoinArticle’s AI Newsroom · from 2 cited sources. How we work
What Happened in Oxford
Crypto investor Evan Luthra, a Forbes 30 Under 30 honoree, says five masked men attacked him on November 4, 2025, after he left an event at Oxford University. He was with four friends when the group was intercepted, according to his account, and the attackers reportedly took about 30 minutes to complete the operation. Thames Valley Police confirmed the incident and opened an investigation that includes financial tracing and review of CCTV footage.
Luthra says the attackers used Face ID to unlock his phone and then moved quickly through his exchange accounts. He reported more than $1.5 million withdrawn from Binance and roughly $600,000 in Ethereum taken from Gate.io. The group also took a Richard Mille watch, which police valued at around £450,000. Accounts differ on some details of the setting: Luthra's account describes a private driver who had been taking him around for several days, who turned into a secluded lane, while the other reporting adds that police identified the Five Mile Drive area of north Oxford as where the vehicle was abandoned.
Recovery and Court Proceedings
Luthra has said just under $1 million of the stolen assets has been recovered, with help from exchanges and a UK court order issued under the Proceeds of Crime Act (POCA). Binance's share of that recovery for Luthra came to about $370,000. The gap between the more than $2 million taken and the recovered amount remains substantial.
One suspect, Abdul Malik Cali, 24, faces five counts of conspiracy to commit robbery. The trial was originally scheduled for November 2026 and has since been postponed to November 2027, meaning more than two years will pass between the attack and a court hearing. Luthra's identity as the victim was not public at first and emerged in a November 2026 interview. Luthra has also said delays in police access to his phone worsened his losses, and he suspects the person who arranged his driver may have been involved, though he has not provided proof.
A Growing Pattern of Wrench Attacks
The case is part of a reported rise in so-called wrench attacks, in which criminals use physical force rather than hacking to obtain access to a victim's assets. One reporting source cites France's Interior Minister Laurent Nuñez, who said on June 30 that authorities had recorded 77 cryptocurrency-related kidnapping, extortion and attempted kidnapping cases so far this year, up from 45 in 2025. Around 200 people were arrested either after attacks or before they could be carried out, according to the same remarks.
Other cases cited include a September incident in Minnesota in which two armed brothers allegedly held a family hostage for nine hours and forced a transfer of around $8 million in cryptocurrency, and a January kidnapping plot in Milan that involved a €250,000 crypto ransom.
What the Case Shows About Exchanges and Law Enforcement
The recovery illustrates a role centralized platforms can play. Binance's contribution to the recovery indicates that exchanges can sometimes freeze or claw back funds when working with law enforcement and courts. The use of a POCA order also shows that existing UK proceeds-of-crime tools can apply to digital assets held on exchanges, which may give future victims a clearer route to partial recovery. Several details in this account, including the amounts and the timeline, rest on Luthra's own statements and police confirmation of the incident itself rather than independent verification of every figure.
Why It Matters
For Traders
Recovery of about $1 million through exchange freezes shows some balances can be clawed back, but the multi-year timeline means no near-term change in asset prices is implied.
For Investors
Rising wrench attacks and the gap between losses and recoveries highlight physical security risk as a structural cost for high-profile holders.
For Builders
Exchange cooperation with courts and use of POCA orders on exchange-held assets are design considerations for custody and account-recovery features.
This article is for information only and is not financial advice. Read the full disclaimer.
