One can hack exchanges and if you coins there, it can be stolen. recently, this happened in a  major Indian exchange called Coinsecure.