What about just circuit breaking withdrawals temporarily?  Allow trading to continue, but keep all money onsite incase a rollback is required.