No I also blame the exchanges, wallet providers for that bug ... why rely solely on get_transfers when you could have double checked it with the actual balance like ( incoming transfer ok - does it add with the balance ok -> money deposit succesful... i mean it is a lot of money ^^
True, they should have balance checkers, you would have thought that was already in place for basic double spend checks. The entire thing was the least professional response I have seen. But then again all other responses have been extremely professional so it's pretty easy not to hit that bar. Exchanges that fell for this have shit opsec.