Cryptocurrency exchange Bybit has revealed that artificial intelligence-powered security systems blocked over $700 million in potential user losses during the first half of 2026, marking a significant escalation in how exchanges are using machine learning to combat increasingly sophisticated fraud. The world's second-largest crypto exchange by trading volume detailed its expanded defenses in a new security report, showing how AI is reshaping the speed and scale of financial crime detection in digital asset markets.

How Is AI Changing Crypto Security Operations?

Bybit's security infrastructure now operates across three interconnected layers, each powered or enhanced by artificial intelligence. The exchange processes more than 100,000 security alerts with AI assistance, allowing human specialists to focus on complex threat decisions rather than routine pattern matching. During the first half of 2026, the platform intercepted more than 30,000 suspicious withdrawal requests in an average of just 4.7 minutes, with 95% of reviews completed within 10 minutes.

The speed matters because attackers are accelerating their own operations. As David Zong, Head of Group Risk Control and Security at Bybit, explained the stakes of this technological race.

"The cybersecurity arms race has entered an era of minutes. Using AI to strengthen our security and risk-control capabilities, while securing the AI systems themselves, is our top priority, with human judgement remaining at the centre of critical security decisions," said Zong.

David Zong, Head of Group Risk Control and Security at Bybit

This shift reflects a broader reality in fintech: traditional security review cycles measured in hours or days are no longer fast enough. Bybit's AI-assisted security auditing identified high-severity vulnerabilities at three to five times the rate of manual review, and the company reduced the time to move from security assessment to testing from approximately two weeks to just two hours.

What Specific Threats Are AI Systems Now Detecting?

Beyond withdrawal fraud, Bybit's AI systems are catching emerging patterns that humans might miss. The exchange identified approximately $212 million in potential fraud-linked on-chain funds and blacklisted more than 10,000 malicious addresses using behavioral analysis and AI-assisted monitoring. The platform also expanded monitoring to 100% of business-relevant on-chain activity, including listed token contracts, ecosystem contracts, and the company's cold, warm, and hot wallets.

During the first half of 2026, Bybit identified and handled 10 security incidents involving listed token projects, with zero resulting losses to the platform. In eight cases, Bybit completed emergency responses before other major exchanges, while two incidents were detected before the affected projects themselves identified the attacks. This suggests that AI-powered monitoring is creating a new competitive advantage in the crypto industry: speed of detection and response.

Steps to Understanding Modern Crypto Security Architecture

• Account Protection Layer: Monitors user accounts for suspicious activity, including unusual withdrawal patterns and login attempts from unfamiliar locations, with AI flagging high-risk transactions for human review.
• On-Chain Monitoring Layer: Tracks blockchain activity across token contracts, ecosystem interactions, and exchange wallets in real time, using behavioral analysis to identify fraud patterns before they spread across the network.
• Automated Testing and Penetration Layer: Uses AI-assisted code auditing and red-team platforms to discover vulnerabilities at scale, reducing the time from asset discovery to initial penetration testing to under 24 hours.

The third layer represents perhaps the most dramatic acceleration. Bybit's automated red-team platform assessed 1,489 public-facing assets and identified more than 100 high-severity vulnerabilities during the first half of 2026. Traditional manual penetration testing cycles measured in weeks have been compressed to a single day, enabling security teams to identify and investigate potential weaknesses at a substantially faster pace.

Why Are Wealth Managers Also Adopting AI, and What Are the Risks?

The urgency around AI-powered security extends beyond crypto exchanges. The UK Financial Conduct Authority (FCA) released a 2026 wealth management survey showing that 13% of wealth management firms are already using in-house or third-party AI tools, with that figure rising to 45% when including firms considering AI adoption within the 12 months following the survey.

The FCA's report emphasizes that while AI can reduce friction, improve efficiency, and help close the advice gap for consumers who lack access to financial guidance, it also introduces new risks. These include fraud, cyber security vulnerabilities, and potential client harm if AI systems are not properly overseen. The regulatory body stressed that consumer trust is critical, noting that one in five UK adults are already open to AI making financial decisions for them, but people will need confidence that AI is being used safely with appropriate human oversight.

For wealth managers managing almost £1 trillion in assets across more than 5.5 million retail clients, the challenge is balancing innovation with governance. Firms are growing rapidly, with 41% of surveyed wealth managers planning to acquire another firm, grow revenue, or increase their client base by more than 25% over the next two years. However, the FCA warned that if fast growth is not managed effectively, it may create poor outcomes including weak client service, business continuity gaps, and in some cases disorderly failure.

The convergence of AI adoption in both crypto security and traditional wealth management reflects a fundamental shift in financial services: artificial intelligence is no longer optional infrastructure. It is becoming the baseline for competitive operations. Bybit's ability to process 100,000 security alerts and identify vulnerabilities five times faster than manual methods sets a new standard that other exchanges and financial institutions will need to match. At the same time, regulators are beginning to establish guardrails around AI use, emphasizing that speed and scale must be paired with human judgment and transparent governance.

For consumers and investors, the implication is clear: the financial institutions managing their assets are in an accelerating arms race with attackers, and AI is now the primary weapon on both sides. The question is no longer whether AI will be used in financial security, but whether it will be used responsibly, with adequate human oversight and regulatory safeguards in place.