🛡️ In the crypto ecosystem of 2025, an interesting turn is happening — phishing losses have hit a new low.

Numbers speak: phishing incidents throughout the year caused approximately $83.85 million in damages, compared to $494 million in 2024, an 83% decrease. The number of victims also plummeted from 333 last year to 106, a 68% drop. Does this mean phishing attacks are a thing of the past? Not so fast.

But there are hidden details behind these numbers. Attack activity is closely tied to market trends — during Ethereum's rebound in Q3, quarterly losses soared to $31 million, nearly 30% of the year's total. In other words, when the market is hot, hacker activity heats up too.

Even more concerning is the evolution of attack methods. Traditional Permit2 authorization traps remain mainstream, but the vulnerability in the new EIP-7702 authorization mechanism was quickly exploited in August, with just two incidents siphoning off $2.54 million. Attackers are shifting from "large amounts with low frequency" to "small amounts with high frequency" — average losses have been reduced to $790, but transaction volume is rising.

What does this mean for users? Malicious signature requests are everywhere. Even if individual risks seem small, the cumulative effect should not be underestimated. The drainer ecosystem is rapidly iterating, and protective strategies must be upgraded accordingly.