Others have already answered your questions, so I will offer you some advice, first, make sure to set up a decent password, activate 2FA, and NEVER leave significant amounts of Cryptos in exchanges for too long, of course, thats for the most paranoids, but if you don't control the private keys, then they aren't really your funds.