Cryptocurrency exchange Bybit says it intercepted more than $700 million in potential user losses during the first half of 2026 as the cryptocurrency exchange expanded its security systems following a $1.46 billion theft in February 2025.
The figures were disclosed Tuesday in Bybit’s H1 2026 Risk & Security Report. The Dubai-based company said its security efforts during the period focused on user and account security, real-time on-chain monitoring, and AI-assisted security operations.
Sponsored
The company said it blocked more than 30,000 suspicious withdrawal requests during the first half of the year, protecting nearly 20,000 users from potential losses. Bybit said its initial risk reviews took an average of 4.7 minutes, with 95% completed within 10 minutes.
It also identified about $212 million in potentially fraud-linked on-chain funds and blacklisted more than 10,000 malicious addresses, according to the report.
Bybit Expands Real-Time Monitoring
The security push comes after Bybit suffered one of the largest cryptocurrency thefts on record in February 2025, when about $1.46 billion in digital assets was stolen from the exchange.
Since then, Bybit says it has expanded its ability to monitor transactions and respond to threats across its infrastructure.
The exchange said it now monitors 100% of business-relevant on-chain activity, including listed token contracts, ecosystem contracts and its cold, warm and hot wallets.
During the first half of 2026, Bybit said it handled 10 security incidents involving listed token projects without recording losses to the platform. In eight cases, the company said it completed emergency responses before other major exchanges. In two cases, Bybit said it detected the incidents before the affected projects identified the attacks.
The company said the goal is to shorten the time between detecting suspicious activity and taking action as attackers adopt new techniques.
AI Tools Accelerate Security Testing
Bybit is also increasing its use of AI and automation in security operations.
During the first half of 2026, AI-assisted analysis processed more than 100,000 security alerts, according to the report. Bybit said AI-assisted audits identified high-severity vulnerabilities three to five times more frequently than manual reviews.
Automation also reduced the time between security assessment and testing from about two weeks to two hours, the company said.
An automated red-team platform assessed 1,489 public-facing assets and identified more than 100 high-severity vulnerabilities. Bybit said the average time from discovering an asset to beginning initial testing fell to less than 24 hours, compared with weeks under its previous manual process.
Despite the increased use of automation, Bybit said human security specialists remain responsible for complex security decisions.
Why This Matters
The new figures are part of Bybit’s effort to demonstrate how its security architecture has changed since the 2025 breach.
Bybit has said it has worked with law enforcement agencies, blockchain intelligence firms and industry partners to trace assets linked to the theft. It has also pursued legal action against North Korea and the Lazarus Group over assets linked to the attack.
Dive into DailyCoin’s hottest crypto scoops today:
XRP’s Quantum-Resistance Roadmap Takes Aim At 2028
Stellar Hits Multi-Year Floor; XLM Eyes Bullish Reset To $2.40?