SlowMist released an analysis of stolen funds from MistTrack in the fourth quarter of 2025. In the fourth quarter of 2025, 300 cases of stolen funds were reported (excluding cases reported through other channels), and approximately 1 million USD in 9 cases was successfully frozen or recovered.

The three main causes of theft incidents are phishing attacks, scams, and private key leaks. Phishing remains the primary cause of losses. From fake domains to autocomplete hijacking redirects, phishing is no longer limited to "clicking the wrong link." One victim mistakenly sent 50 million USDT to a forged similar address — the first 3 and last 4 characters were exactly the same.