Although monetary losses declined, users still lost tens of millions of dollars to common cybersecurity exploits like address poisoning scams.