The exchange’s H1 2026 Risk & Security Report highlights a shift toward rapid intervention, with the average initial risk review time slashed to 4.7 minutes. Bybit claims to have processed over 100,000 security alerts using AI, while blacklisting more than 10,000 malicious addresses linked to approximately $212 million in fraudulent on-chain activity. David Zong, Head of Group Risk Control and Security, noted that while AI accelerates the defensive cycle, human judgment remains the final arbiter for critical security decisions.

Beyond internal account protection, the firm has expanded its oversight to include 100% of business-relevant on-chain activity. This proactive stance allowed the platform to resolve 10 security incidents involving listed token projects without incurring platform-wide losses. Bybit also deployed an automated red-team platform to conduct vulnerability assessments, successfully identifying over 100 high-severity flaws across its public-facing assets. The company continues to coordinate with law enforcement and blockchain intelligence firms to pursue assets connected to the Lazarus Group, emphasizing that collaboration is essential to making cyberattacks less profitable and harder to execute.