Slow Fog: Phishing attacks remain the primary cause of stolen funds in Q4, with 300 cases reported and 1 million dollars recovered

Slow Mist released the analysis of stolen funds from MistTrack for the fourth quarter of 2025. In the fourth quarter of 2025, there were 300 reports of stolen funds received (excluding cases reported through other channels), with approximately $1 million successfully frozen or recovered in 9 cases.

The three main causes of theft incidents are: phishing attacks, scams, and private key leaks. Phishing remains the primary cause of losses, evolving from fake domains to autocomplete hijacking redirects; phishing is no longer limited to "clicking the wrong link." One victim mistakenly sent 50 million USDT to a forged similar address—where the first 3 and last 4 characters were exactly the same.