The top seven victims collectively lost $17 million due to phishing signatures like ERC20 Permit, Create2, increaseAllowance, and Swap.