That's the whole thing. Crypto was supposed to be a currency system by using a block chain as a ledger.
Ethereum is kind of what crypto was thought up to be. A semi stable coin, that serves as decentralized currency.
In some ways it's brilliant; no institution that can watch what you buy, limit you or take their cut. But then again, it's rife with illegal transactions and some really impactful theoretical attacks, especially against the ledger. It's a blessing and a curse.
Social engineering is probably 95% of modern attack vectors. And that's not even unexpected, some highly regarded computer scientists and security researchers concluded this more than a decade ago.