Approval phishing scams represent a persistent and growing security vulnerability in Ethereum that drains user funds through social engineering
Early and rising — still a small slice of coverage but gaining +4pp over the last 3 days. This is where attention may be headed next.
Approval phishing scams are a significant and growing threat to Ethereum users, exploiting social engineering tactics to drain funds from crypto wallets. Security firms like CertiK highlight the substantial financial losses incurred, with $723 million lost across numerous incidents, underscoring the persistent vulnerability within the ecosystem.
Security vulnerabilities can deter both retail and institutional investors, as the risk of fund loss undermines trust in the platform. This can lead to reduced investment and slower adoption, impacting Ethereum's market growth and price stability.
Still mostly niche and specialist coverage — not yet picked up broadly by mainstream press.
"Phishing approvals continue draining crypto wallets. Security researchers say approval phishing remains one of the most common social engineering attacks in crypto because users unknowingly grant unlimited spending permissions while believing they are approving a harmless transaction."
"According to blockchain security firm CertiK, phishing scams caused $723 million in losses across 248 incidents during 2025."
"The latest phishing loss comes only days after another high-profile onchain incident highlighted a different risk facing crypto users. Earlier this week, a trader lost nearly $2 million after a decentralized exchange routed an Ether swap through a low-liquidity pool, allowing a same-block arbitrage trade to extract most of the transaction's value."