First of all, it's impossible.
Most of the time, people's tokens are stolen simply because they expose the private key or the smart contract of the token.