The Art World’s Real Vulnerability Isn’t Theft. It’s the Move.

On Oct. 23, the restored Grand Palais will fill with more than 200 galleries for Art Basel Paris, bringing with them an extraordinary concentration of value: paintings, sculptures and objects worth, collectively, billions. What the crowds and the champagne obscure is the logistics underneath. For a few short weeks, an unusual share of the world’s most valuable art is not hanging safely on a wall. It is in motion, crated and uncrated, trucked across the city, lifted onto stands and moved between galleries, collectors, museums and storage. The spectacle is the art. The risk is the movement.

And the fair is only the most concentrated example of a singular year for art on the move. In July, the Bayeux Tapestry left France for the first time in almost a thousand years to hang at the British Museum, a journey some historians warned the fragile cloth should never make. The 70-meter-long tapestry will be displayed there from September 2026 to July 2027. In New York, the Met assembled around 200 works from public and private collections for the first comprehensive Raphael retrospective in the U.S. A major Vermeer show has gathered paintings normally scattered across three continents into a single set of rooms. Each is a triumph of curation. Each is also a vast logistics operation, because every one of those objects had to leave a safe wall and pass through many hands to get there.

When we picture art crime, we picture the heist. Last autumn gave us the definitive image of it: thieves in balaclavas used a freight lift to reach the Louvre’s Apollo Gallery with roughly €88 million of French crown jewels in under eight minutes. What looked at the time like a spectacular one-off has since become a wider pattern. Over the past year, France has endured a run of museum thefts, most recently this month, when thieves cut through a perimeter fence at the Musée Renoir on the Riviera and entered through a window left with several of the painter’s works before the building had even opened. The details differ each time, but the lesson is the same one the Louvre taught and the public keeps refusing to learn. These are not stories about daring criminals defeating sophisticated fortresses. They are stories about access.

At the Louvre, a 2019 audit had already flagged the security weaknesses the thieves exploited. Camera coverage was patchy. And in a detail almost too perfect to be true, the password to the museum’s surveillance system was reportedly the word “Louvre.” At the Musée Renoir, the thieves reportedly timed their entry to a gap in the guards’ patrol. In theft after theft this year, the intruders did not defeat a fortress. They walked through gaps in who could go where, and what was watching when they did. The instinct after an event like that is to demand more cameras and heavier doors. The more useful question is quieter: who had access, was it ever properly controlled and would anyone have noticed if it was not?

That question matters far more in the ordinary moments than the dramatic ones, and the ordinary moments are where most art actually lives. The safest a masterpiece ever is, is hanging in a monitored gallery. Everything else is exposure. The crate on the loading dock at six in the morning. The transit van. The handoff from the shipper to the fair to the installation crew. The deinstallation at the end of the week, when everyone is tired and the paperwork is rushed. A fair like Art Basel Paris compresses all of it into a few frantic days and multiplies the number of hands each object passes through.

Each of those handoffs is a seam, and seams are where accountability blurs. When a work moves from a gallery’s control to a shipper’s, then to a fair’s and finally to a collector’s, there is a moment at each boundary where it is not fully anyone’s responsibility. The chain of custody, not the display case, is the real security architecture of the art market, and it is often the least examined part of the whole operation.

Then there is the human layer. A fair runs on a temporary army: riggers, art handlers, technicians, caterers, security staff, many of them brought on for a week and issued credentials in a hurry. The credential is the vulnerability, not the alarm. Access granted quickly and never revoked, passes that still work a week after the job ended, badges shared between shifts. In my experience, the failure is almost never a defeated alarm system. It is a door that opened for someone whose access should have ended, and a record no one was watching closely enough to flag.

If that sounds less dramatic than a masked thief, consider the most damaging art-security failures of recent years. Not the Louvre, but the British Museum, where a long-serving insider is believed to have removed, damaged or destroyed around 1,500 objects over a period that may have stretched for the better part of three decades. It was discovered not by an alarm but because pieces began surfacing for sale online. The losses that hurt most are rarely fast and cinematic. They are slow, internal and enabled by trust that was never checked against a record. Institutions that suffer a serious loss tend to discover, afterwards, that warning signs were in the access logs all along.

None of this is an argument against the spectacle. Art is meant to move; a market and a culture depend on it. But the economics deserve honesty. We insure a painting for tens of millions and then, for a few days, protect it with a borrowed credential and a handshake between three companies that have never worked together before. The gap between what a work is worth and how it is actually watched during transit and installation is the real exposure in this business, and it widens every time the calendar fills with fairs.

So as the crates arrive at the Grand Palais next month, the security question worth asking is not whether someone will smash a vitrine in front of the cameras. It is duller and more important than that. Who can reach the loading bay before the fair opens? Whose pass still works after their shift has ended? Who is accountable for the object in the 90 seconds it belongs to no one? The thief at the door will always make the headlines. The gap in the chain of custody is where the art actually goes.