Ex-FBI agent reveals ‘wrench ring’ theory in Nancy Guthrie case, ‘porch guy was a sullen guy’

“Do you know what a spanner attack is?” she wrote on

“Despite its extensive expertise, the FBI has been unable to determine who was behind the emails sent to both media outlets and @TMZLive. The FBI worked with private SMBs (subject matter experts) in the forensic digital space and still cannot answer who sent any messages. Why? Because they are a complex network and they know their business,” she continued. This is why the FBI has not traced Bitcoin addresses. These extortioners/kidnappers are experienced in such matters. “

Coffindaffer added, “Are all the ransom/extortion emails sent to TMZ related? No one knows because none have been traced, but they certainly used the same modus operandi.”

She then said she believed the case was unsolved “because of the sophistication of the criminal mastermind,” adding, “Porch Guy was a sullen man.”

Learn more | Nancy Guthrie’s neighbor claims she saw a “strange man” in the days before she disappeared, “hunched over and wearing street clothes…”

Coffindaffer concluded: “Did you know that on January 31, 2026, 2 teenagers from California committed a similar crime in Scottdale? They wanted cryptocurrency, did not know each other prior to the crime, and were allegedly directed by “Red” and “8” and provided the seed money. No, these teenagers had nothing to do with Nancy’s crime, but with Wrench Ring? That makes sense. Remember, LE I learned early on that’s what they all said, and Savannah said it.”

A “wrench attack” (also known as a $5 wrench attack or rubber hose cryptanalysis) is a physical attack or kidnapping in which a suspect uses violence or coercion to force a cryptocurrency holder to reveal their private key, password, or mnemonic phrase.

Learn more | Nancy Guthrie case: Former FBI agent reveals why Savannah Guthrie’s mom was ‘more vulnerable’ to attack

“I know we have unknown DNA and don’t know who the contributors or depositors were, but I think they’re getting closer to finding out who it was,” he said.

Nanos also pushed back against suggestions that Guthrie’s case has become a “cold case.” He said the matter only became a cold case after the lab told them they couldn’t identify the blood evidence.