Binance wallet intercepted $540 million in potential losses in the first half of the year.

Binance Co-CEO Richard Teng stated that security remains the core of crypto trust. In the first half of 2026, the Binance wallet security center helped users avoid approximately $540 million in potential losses and reminded that AI makes attacks more sophisticated; spending a few extra seconds to verify can change the outcome.

The center, launched on February 3, conducts real-time scans for keyless multi-party computation wallets and imported mnemonic wallets, covering link openings, transaction signatures, and unknown token deposits. Official data also includes filtering approximately 206 million spam transfers, covering about 2.6 million users, identifying around 4.93 million high-risk transactions across 19 chains, and discovering about 996,000 instances of malicious authorization.

Changes on the attack side show that malicious entities have nearly tripled quarter-over-quarter. AI is being used to generate malicious code, phishing sites, and fake identities in bulk, shifting from broad net tactics to targeted fraud, including "buy only, no sell" and hidden backdoor contracts. The security side also uses models to analyze token behavior, site risks, and attack intentions, providing one-click revocation of authorization. SlowMist conducted an audit of its design in February.

In industry comparisons, CertiK's Hack3D report for the first half of the year indicated that phishing incidents decreased by over 50% year-on-year, but losses only dropped by about 10.8%, still around $370 million. Binance's open letter to users at the beginning of the year stated that under the proof of reserves, user assets were approximately $162.8 billion. Red team exercises reduced the internal phishing success rate from 3.2% to 0.4%, and assisted about 50,000 external scam victims in recovering approximately $11.7 million.

In market mechanisms, buyers are retail wallet users afraid of having their signatures drained, while sellers are exchange wallets that make security a product entry point. The driving force behind incidents comes from the expansion of fraud capacity after AI reduces costs, with funds remaining in user addresses from intercepted authorizations and phishing transactions, rather than flowing to attack contracts. Benefiting are platforms that can make risk control a default scan, while under pressure are attack groups relying on bulk fake sites for customer acquisition, and users who still treat "multiple clicks for authorization" as a habit.

Teng also tied the security narrative to 24-hour trading and perpetual contract expansion: the market never stops, and attacks do not take a break, making wallet interception a supporting capability for exchanges competing for custody of external assets.

Source: Public Information