What ChainCatcher reported
On November 11, 2026, ChainCatcher reported that crypto wallet provider Bitget Wallet said it would expand AI-assisted threat detection.
In the third quarter of 2026, the weekly average number of signature requests Bitget Wallet flagged as potential phishing rose 7.4 times, from about 5,000 in the second quarter to about 37,000.
What the 7.4× figure does not show
Bitget Wallet chief operating officer Alvin Kan said the rise may reflect both more threat activity and stronger detection. He also said the available data cannot measure how much each factor contributed.
Kan said the statistic counts flagged signature interactions. It is not a count of separate attack incidents, and it is not a tally of confirmed losses of funds.
What the expanded checks actually do
Bitget Wallet introduced AI-assisted risk detection in the second quarter of 2026. The expanded checks analyze website code and domain-registration information for signs of fraud, and simulate a transaction before the user signs in order to look for hidden permissions.
Among high-risk domains newly blocked in October, 90% were identified by AI. In the second quarter that share was 36%. Of the domains AI flagged that month, nearly 70% had no matching alert in the external threat-intelligence sources Bitget Wallet checked.
Separate phishing reports, not part of this count
The same ChainCatcher report noted that phishing aimed at crypto users was already being documented earlier in 2026. In July, a trader lost nearly $1 million after signing a malicious Ethereum token approval. In August, a Rapid7 investigation found a phishing campaign that targeted 885,000 phone numbers and sent recipients to sites impersonating crypto wallet providers.
Those cases are separate from Bitget Wallet’s flagged-signature totals. The report does not tie the 7.4× figure, or the October domain shares, to confirmed losses at Bitget Wallet.
What remains unproven
The growth being discussed is in items the wallet flagged, not in verified thefts. Kan’s caveat still applies: the figures do not show how much of the jump is more phishing versus better detection.
Original report: ChainCatcher, published November 11, 2026, 18:16 (UTC+8).
