Bybit reported that its upgraded security systems intercepted more than $700 million in potential user losses during the first half of 2026. The improvements follow the exchange’s $1.46 billion hack in February 2025.
The figures highlight the impact of expanded real-time monitoring and AI-assisted detection.
The Drivers of This Activity
In its H1 2026 Risk & Security Report, Bybit stated that it blocked more than 30,000 suspicious withdrawal requests, protecting nearly 20,000 users and preventing over $700 million in potential losses. Initial risk reviews averaged 4.7 minutes, with 95% completed within 10 minutes.
The exchange also identified approximately $212 million in funds potentially linked to fraud and blacklisted more than 10,000 malicious blockchain addresses. Security teams now monitor 100% of business-relevant on-chain activity and used behavioural analysis combined with AI to detect emerging fraud patterns. Automated testing reduced some security assessment cycles from two weeks to two hours.
These measures were implemented after the February 2025 incident in which roughly $1.46 billion was drained from an Ethereum cold wallet, an attack attributed to the Lazarus Group. Bybit has pursued legal action related to the breach and has worked to strengthen its overall security architecture.
Impact and Broader Context
The reported interceptions demonstrate how post-incident investments in monitoring and rapid response can limit subsequent damage to users. Faster review times and broader on-chain coverage aim to stop suspicious activity before funds leave the platform.
The results also serve as a public update on Bybit’s recovery and hardening efforts following one of the largest exchange hacks on record. Other platforms and users will likely view the figures as a benchmark for the effectiveness of real-time threat detection in high-volume environments.
Further details from the full security report and any additional recovery progress related to the 2025 incident will provide ongoing insight into the exchange’s risk posture.
Source: Bybit H1 2026 Risk & Security Report