Crypto phishing attacks took a sharp turn in 2025—reported losses plummeted 83% compared to previous years, marking a significant win for security awareness. But here's the catch: the threat hasn't vanished, just evolved.

Just this week, a sophisticated wallet drainer struck through a malicious permit signature, draining $1.08M in aEthLBTC from a single user. This method has become the new frontier for attackers bypassing traditional security layers.

The permit signature exploit is particularly nasty because it operates in the shadows of DeFi interactions. Users approve token spending without realizing they're signing away their entire portfolio. aEthLBTC holders and other DeFi participants should stay vigilant—one careless signature can mean total asset loss.

The 83% drop in overall phishing losses suggests better security practices are taking root, but wallet drainers prove that attackers are simply becoming more surgical and targeted. The message is clear: security protocols evolve, but so do the criminals.