In any case, everywhere there is a risk of being attacked by hackers. Exchanges are no exception. I would advise you to keep the coins in your wallet after encrypting it. And store the wallet on an external resource such as a hard drive. And on the account of tokens and in particular the ERC-20 wallet. Be careful a lot of phishing sites. A private key passwords, etc. keep also on external resources.