So the news about breaking the exchange is true? Do all tokens in place?

Someone lost their tokens, very sad. Store on the exchange is now unsafe

Surely they did not even activate 2fa
Grin

Yep, most likely. No one can force you to care about your own funds.

KuCoin, for one, forces you to activate 2fa in order to sign in.

I'm speaking generally, like you can't tell people to have a Ledger when they use their notepad to copy+paste the private key in MEW.

And what about online wallets?

Well, I heard only about MEW. But it's only for erc20