Spain Arrests Suspect in Ledger Co-Founder Kidnapping

• Spanish authorities apprehended a suspect involved in the January 2025 abduction of Ledger co-founder David Balland.
• The kidnappers demanded a ransom of 10 million euros (approximately $11.5 million) during the high-profile incident.
• This arrest is part of a broader crackdown on a criminal organization targeting cryptocurrency executives and investors in France.

Arrest in Benalmádena

The Spanish Civil Guard executed the arrest in Benalmádena, a town in the southern province of Málaga, acting on a European arrest warrant issued by France. The suspect had been on the run, moving through Valencia, Seville, and Cádiz while living under the radar. To avoid detection, the suspect and his associates utilized online rental platforms for housing and used bank cards belonging to third parties. Due to the suspect's alleged ties to a dangerous criminal network, the police operation was large-scale to prevent any escape or intervention by accomplices.

The Abduction of David Balland

David Balland was seized from his residence in central France on January 21, 2025. During his captivity, he was reportedly subjected to torture as his captors sought a ransom of 10 million euros. He was eventually rescued by a specialized police operation on the night of January 22, 2025. While several other suspects had already been detained by French authorities, this particular individual had managed to cross the border into Spain to evade capture.

Escalating Threats to Crypto Professionals

The case underscores a violent trend of crimes targeting individuals in the digital asset sector. In June 2025, French prosecutors charged 25 individuals in connection with multiple kidnappings and attempted abductions of crypto investors and executives. Notable incidents in the region include:

• The attempted kidnapping of the daughter and grandson of Pierre Noizat, CEO of the Paymium exchange.
• A June 2025 abduction where attackers demanded access to a victim's hardware wallet.
• A series of coordinated attacks involving torture and high ransom demands across Europe.