Cryptocurrency exchange Bybit has published its risk and security report for the first half of 2026, covering the period from January 1 to June 15. According to the document, the platform prevented potential user losses totaling more than $700 million. During the reporting period, the exchange intercepted more than 30,000 suspicious withdrawal requests and protected nearly 20,000 users from potential losses. The average time for initial risk assessment was 4.7 minutes, with 95% of reviews completed within 10 minutes.
The company reported 100% monitoring coverage of on-chain activity related to its business operations. In the first six months of the year, Bybit identified approximately $212 million in funds potentially linked to fraud and blacklisted more than 10,000 malicious addresses. In addition, the exchange identified and resolved 10 security incidents involving token projects traded on the platform, with no losses to Bybit. In two cases, the attacks were detected before the affected projects had independently registered the incidents.
"In cybersecurity today, every minute counts — it's a real arms race. We are actively leveraging AI to strengthen protection and risk management, while also paying special attention to the security of AI solutions themselves," said David Zong, Head of Risk Control and Security at Bybit.
In the first half of the year, Bybit processed more than 100,000 threat alerts using artificial intelligence. According to the company, automated auditing enabled the detection of critical vulnerabilities 3–5 times faster than manual review. Bybit's red team platform tested 1,489 public assets and identified more than 100 high-severity vulnerabilities. The average time from asset discovery to the start of initial penetration testing was reduced to less than 24 hours, compared to several weeks under the traditional approach. The company emphasizes that AI is used to scale and accelerate processes, while final decisions on critical threats remain with security specialists.