Bybit security report 2026 shows $700M in threats blocked amid Lazarus fallout

Bybit says it stopped more than $700 million in potential losses during the first half of 2026, a figure the exchange disclosed in a new security report released roughly a year and a half after hackers drained $1.46 billion from its Ethereum cold wallet in what remains the largest cryptocurrency theft on record. The numbers, laid out in the Bybit security report 2026 covering January 1 through June 15, offer the clearest picture yet of how the exchange has rebuilt its defenses after the February 2025 breach linked to North Korea’s Lazarus Group.
Key takeaways
- Bybit intercepted more than 30,000 suspicious withdrawal requests in H1 2026, protecting nearly 20,000 users and blocking over $700 million in potential losses.
- The exchange blacklisted more than 10,000 malicious blockchain addresses and flagged about $212 million in funds tied to suspected fraud.
- AI-assisted audits cut vulnerability detection time from roughly two weeks to about two hours, finding three to five times more high-severity issues than manual reviews.
- The report follows the February 21, 2025 hack that drained about $1.46 billion in Ethereum and staked Ether, an attack U.S. authorities attributed to North Korea’s Lazarus Group.
- Bybit has filed a lawsuit in the U.S. District Court for the District of Columbia against North Korea, its Reconnaissance General Bureau, and the Lazarus Group.
Bybit thwarts over $700 million in potential losses in early 2026
Bybit’s numbers show a security operation moving faster than the fraud attempts it’s designed to catch. More than 30,000 suspicious withdrawal requests were intercepted between January and mid-June, protecting close to 20,000 users from losses that could have totaled over $700 million, according to the exchange’s H1 2026 Risk & Security Report.
… Continue reading the full article at the original source below.

