
Weekly average of signing requests flagged for potential phishing rose 7.4-fold in Q3 2026.
Bitget Wallet is expanding AI-assisted threat detection after reporting a 7.4-fold increase in weekly signing requests flagged for potential phishing during the third quarter of 2026, reaching about 37,000 per week.
AI-generated summary
Bitget Wallet introduced AI-assisted risk detection in Q2 to counter growing phishing threats in the cryptocurrency sector.
Crypto wallet provider Bitget Wallet said Wednesday it was expanding AI-assisted threat detection after its weekly average of signing requests flagged for potential phishing rose 7.4-fold in the third quarter of 2026.
The wallet flagged about 37,000 such requests per week in Q3, up from 5,000 in Q2, according to Bitget Wallet chief operating officer Alvin Kan.
“The increase likely reflects both greater threat activity and improved detection capabilities, although the data does not allow us to quantify each factor’s contribution,” Kan told Cointelegraph.
The wallet introduced AI-assisted risk detection in Q2, he added.
Kan said that the tally counted flagged signing interactions, not unique attacks or confirmed financial losses.
Bitget Wallet said its expanded AI checks examine website code and domain registration details for signs of fraud. The wallet also simulates transactions to spot hidden permissions before users sign.
Bitget Wallet also said AI helped identify 90% of newly blocked risky domains in October, compared with 36% in Q2. Nearly 70% of domains its AI flagged that month had no matching alerts in the external threat feeds it checked.
The findings come amid continued phishing threats targeting crypto users. In July, a trader lost nearly $1 million after signing a malicious Ethereum token approval.
An August investigation by Rapid7 uncovered a phishing campaign that targeted 885,000 phone numbers and directed recipients to websites impersonating crypto wallet providers.

Ethereum consensus client Lighthouse released security patch v8.3.3 on Nov. 9, urging all beacon-node operators to upgrade within hours or days. Validator-client updates are low priority for staking users. Technical vulnerability details will be disclosed later.

Across Protocol regained control of its across.to domain after a social engineering attack on Namecheap allowed attackers to replace its website with a phishing site on Tuesday. The cross-chain bridge, ranked third by 30-day transfer volume, said all systems are working normally and affected users will be made whole.

LNbits has released version 1.7.0 after a wave of attacks targeting its Bitcoin Lightning wallet platform resulted in stolen funds, warning users that updating alone won't protect already-compromised credentials and urging immediate credential resets.

Bitcoin's proposal repository added three draft specifications (BIP458, BIP459, BIP460) between Nov. 2-4 that introduce signature aggregation to lower fees for jointly assembled payments and input consolidation, with half-aggregation reducing signature payloads by 45% and full aggregation by 90%.

HIVE Digital Technologies is targeting $45 million in annual revenue from an AI data center in Sweden, contingent on securing a final lease, financing, and facility upgrades. The company plans to retrofit its 32-megawatt Big Boden facility for up to 10,000 Nvidia GB300 GPUs with liquid cooling, and is targeting approximately $700 million in total high-performance computing annualized revenue by the end of 2028.

Crosschain bridging protocol Across warned users Tuesday not to access its app or connect wallets while investigating a potential security incident, as users reported losses including $9,000 in USDC and 7,053 USDT0. Separately, NEAR AI disclosed a Monday breach exploiting an SGLang vulnerability that exposed data from approximately 100 users and 18 AI agents.