The majority of the stolen funds are accounted for by a major phishing incident that cost an unfortunate user $55 million.