Rug pulls and other frauds made up a small percentage of losses compared to hacks and exploits, the report stated.