I put everything on my ledger wallets. 2FA on all exchange accounts. Not log-in from any public WIFIs. Common sense really