Of course this is a very fatal mistake when he did not activate 2-FA. it is unfortunate if the famous Stock Exchange must be tainted by insider behavior. maybe the exchange manager should be free from selection including honesty, if he really stole user assets then he must be held.